A chromium security update has been released for SUSE Linux Enterprise 15 SP4.

openSUSE-SU-2022:10035-1: important: Security update for chromium

openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID: openSUSE-SU-2022:10035-1
Rating: important
References: #1200783
Cross-References: CVE-2022-2156 CVE-2022-2157 CVE-2022-2158
CVE-2022-2160 CVE-2022-2161 CVE-2022-2162
CVE-2022-2163 CVE-2022-2164 CVE-2022-2165

Affected Products:
openSUSE Backports SLE-15-SP4
______________________________________________________________________________

An update that fixes 9 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

Chromium 103.0.5060.53 (boo#1200783)

* CVE-2022-2156: Use after free in Base
* CVE-2022-2157: Use after free in Interest groups
* CVE-2022-2158: Type Confusion in V8
* CVE-2022-2160: Insufficient policy enforcement in DevTools
* CVE-2022-2161: Use after free in WebApp Provider
* CVE-2022-2162: Insufficient policy enforcement in File System API
* CVE-2022-2163: Use after free in Cast UI and Toolbar
* CVE-2022-2164: Inappropriate implementation in Extensions API
* CVE-2022-2165: Insufficient data validation in URL formatting

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP4:

zypper in -t patch openSUSE-2022-10035=1


Package List:

- openSUSE Backports SLE-15-SP4 (aarch64 x86_64):

chromedriver-103.0.5060.53-bp154.2.11.1
chromium-103.0.5060.53-bp154.2.11.1

References:

  https://www.suse.com/security/cve/CVE-2022-2156.html
  https://www.suse.com/security/cve/CVE-2022-2157.html
  https://www.suse.com/security/cve/CVE-2022-2158.html
  https://www.suse.com/security/cve/CVE-2022-2160.html
  https://www.suse.com/security/cve/CVE-2022-2161.html
  https://www.suse.com/security/cve/CVE-2022-2162.html
  https://www.suse.com/security/cve/CVE-2022-2163.html
  https://www.suse.com/security/cve/CVE-2022-2164.html
  https://www.suse.com/security/cve/CVE-2022-2165.html
  https://bugzilla.suse.com/1200783