openSUSE-SU-2026:0298-1: important: Security update for chromium
| Newsgroups | gmane.linux.suse.security.announce |
|---|---|
| Message-ID | <[email protected]> |
openSUSE Security Update: Security update for chromium
______________________________________________________________________________
Announcement ID: openSUSE-SU-2026:0298-1
Rating: important
References: #1275913
Cross-References: CVE-2026-76017 CVE-2026-76018 CVE-2026-76019
CVE-2026-76020 CVE-2026-76021 CVE-2026-76022
CVE-2026-76023
Affected Products:
openSUSE Backports SLE-15-SP7
______________________________________________________________________________
An update that fixes 7 vulnerabilities is now available.
Description:
This update for chromium fixes the following issues:
- Chromium 151.0.7922.173 (boo#1275913):
* CVE-2026-76017: Use after free in Chromoting
* CVE-2026-76018: Privilege elevation in Import
* CVE-2026-76019: Incorrect authorization in Workers
* CVE-2026-76020: Race condition in V8
* CVE-2026-76021: Use after free in DOM.
* CVE-2026-76022: Buffer overflow in Network
* CVE-2026-76023: Improper resource control in Linux Toolkit Theming
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP7:
zypper in -t patch openSUSE-2026-298=1
Package List:
- openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):
chromedriver-151.0.7922.173-bp157.2.211.1
chromium-151.0.7922.173-bp157.2.211.1
References:
https://www.suse.com/security/cve/CVE-2026-76017.html
https://www.suse.com/security/cve/CVE-2026-76018.html
https://www.suse.com/security/cve/CVE-2026-76019.html
https://www.suse.com/security/cve/CVE-2026-76020.html
https://www.suse.com/security/cve/CVE-2026-76021.html
https://www.suse.com/security/cve/CVE-2026-76022.html
https://www.suse.com/security/cve/CVE-2026-76023.html
https://bugzilla.suse.com/1275913