openSUSE-SU-2026:21561-1: critical: Security update for chromium

[email protected]
Newsgroups gmane.linux.suse.security.announce
Message-ID <[email protected]> 
openSUSE security update: security update for chromium
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21561-1
Rating: critical
References:

  * bsc#1274549



Cross-References:

  * CVE-2026-19137
  * CVE-2026-19138
  * CVE-2026-19139
  * CVE-2026-19140
  * CVE-2026-19141
  * CVE-2026-19142
  * CVE-2026-19143
  * CVE-2026-19144
  * CVE-2026-19145
  * CVE-2026-19146
  * CVE-2026-19147
  * CVE-2026-19148
  * CVE-2026-19149
  * CVE-2026-19150
  * CVE-2026-19151
  * CVE-2026-19152
  * CVE-2026-19153
  * CVE-2026-19154
  * CVE-2026-19155
  * CVE-2026-19156
  * CVE-2026-19157
  * CVE-2026-19158
  * CVE-2026-19159
  * CVE-2026-19160
  * CVE-2026-19161
  * CVE-2026-19162
  * CVE-2026-19163
  * CVE-2026-19164
  * CVE-2026-19165
  * CVE-2026-19166
  * CVE-2026-19167
  * CVE-2026-19168
  * CVE-2026-19169
  * CVE-2026-19170
  * CVE-2026-19171
  * CVE-2026-19172
  * CVE-2026-19173
  * CVE-2026-19174
  * CVE-2026-19175
  * CVE-2026-19176
  * CVE-2026-19177



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 41 vulnerabilities and has one bug fix can now be installed.

Description:

This update for chromium fixes the following issues:

Changes in chromium:

- Chromium 151.0.7922.108 (boo#1274549):
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-475=1

Package List:

- openSUSE Leap 16.0:

  chromedriver-151.0.7922.108-bp160.1.1
  chromium-151.0.7922.108-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-19137.html
  * https://www.suse.com/security/cve/CVE-2026-19138.html
  * https://www.suse.com/security/cve/CVE-2026-19139.html
  * https://www.suse.com/security/cve/CVE-2026-19140.html
  * https://www.suse.com/security/cve/CVE-2026-19141.html
  * https://www.suse.com/security/cve/CVE-2026-19142.html
  * https://www.suse.com/security/cve/CVE-2026-19143.html
  * https://www.suse.com/security/cve/CVE-2026-19144.html
  * https://www.suse.com/security/cve/CVE-2026-19145.html
  * https://www.suse.com/security/cve/CVE-2026-19146.html
  * https://www.suse.com/security/cve/CVE-2026-19147.html
  * https://www.suse.com/security/cve/CVE-2026-19148.html
  * https://www.suse.com/security/cve/CVE-2026-19149.html
  * https://www.suse.com/security/cve/CVE-2026-19150.html
  * https://www.suse.com/security/cve/CVE-2026-19151.html
  * https://www.suse.com/security/cve/CVE-2026-19152.html
  * https://www.suse.com/security/cve/CVE-2026-19153.html
  * https://www.suse.com/security/cve/CVE-2026-19154.html
  * https://www.suse.com/security/cve/CVE-2026-19155.html
  * https://www.suse.com/security/cve/CVE-2026-19156.html
  * https://www.suse.com/security/cve/CVE-2026-19157.html
  * https://www.suse.com/security/cve/CVE-2026-19158.html
  * https://www.suse.com/security/cve/CVE-2026-19159.html
  * https://www.suse.com/security/cve/CVE-2026-19160.html
  * https://www.suse.com/security/cve/CVE-2026-19161.html
  * https://www.suse.com/security/cve/CVE-2026-19162.html
  * https://www.suse.com/security/cve/CVE-2026-19163.html
  * https://www.suse.com/security/cve/CVE-2026-19164.html
  * https://www.suse.com/security/cve/CVE-2026-19165.html
  * https://www.suse.com/security/cve/CVE-2026-19166.html
  * https://www.suse.com/security/cve/CVE-2026-19167.html
  * https://www.suse.com/security/cve/CVE-2026-19168.html
  * https://www.suse.com/security/cve/CVE-2026-19169.html
  * https://www.suse.com/security/cve/CVE-2026-19170.html
  * https://www.suse.com/security/cve/CVE-2026-19171.html
  * https://www.suse.com/security/cve/CVE-2026-19172.html
  * https://www.suse.com/security/cve/CVE-2026-19173.html
  * https://www.suse.com/security/cve/CVE-2026-19174.html
  * https://www.suse.com/security/cve/CVE-2026-19175.html
  * https://www.suse.com/security/cve/CVE-2026-19176.html
  * https://www.suse.com/security/cve/CVE-2026-19177.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.