openSUSE-SU-2026:0284-1: important: Security update for chromium

   openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2026:0284-1
Rating:             important
References:         #1274759 
Cross-References:   CVE-2026-19556 CVE-2026-19557 CVE-2026-19558
                    CVE-2026-19559 CVE-2026-19560
Affected Products:
                    openSUSE Backports SLE-15-SP7
______________________________________________________________________________

   An update that fixes 5 vulnerabilities is now available.

Description:

   This update for chromium fixes the following issues:

   - Chromium 151.0.7922.137 (boo#1274759):
     * CVE-2026-19556: Use after free in V8
     * CVE-2026-19557: Use after free in TabStrip
     * CVE-2026-19558: Use after free in Extensions
     * CVE-2026-19559: Use after free in HTML
     * CVE-2026-19560: Use after free in Blink


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Backports SLE-15-SP7:

      zypper in -t patch openSUSE-2026-284=1



Package List:

   - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):

      chromedriver-151.0.7922.137-bp157.2.205.1
      chromium-151.0.7922.137-bp157.2.205.1


References:

   https://www.suse.com/security/cve/CVE-2026-19556.html
   https://www.suse.com/security/cve/CVE-2026-19557.html
   https://www.suse.com/security/cve/CVE-2026-19558.html
   https://www.suse.com/security/cve/CVE-2026-19559.html
   https://www.suse.com/security/cve/CVE-2026-19560.html
   https://bugzilla.suse.com/1274759