openSUSE-SU-2026:21581-1: important: Security update for chromium

openSUSE security update: security update for chromium
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21581-1
Rating: important
References:

  * bsc#1274759



Cross-References:

  * CVE-2026-19556
  * CVE-2026-19557
  * CVE-2026-19558
  * CVE-2026-19559
  * CVE-2026-19560



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 5 vulnerabilities and has one bug fix can now be installed.

Description:

This update for chromium fixes the following issues:

Changes in chromium:

- Chromium 151.0.7922.137 (boo#1274759):
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-490=1

Package List:

- openSUSE Leap 16.0:

  chromedriver-151.0.7922.137-bp160.1.1
  chromium-151.0.7922.137-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-19556.html
  * https://www.suse.com/security/cve/CVE-2026-19557.html
  * https://www.suse.com/security/cve/CVE-2026-19558.html
  * https://www.suse.com/security/cve/CVE-2026-19559.html
  * https://www.suse.com/security/cve/CVE-2026-19560.html