Security update for chromium SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:1591-1 Final 1 1 2017-06-18T17:45:26Z current 2017-06-18T17:45:26Z 2017-06-18T17:45:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for chromium This update to Chromium 59.0.3071.104 fixes the following security issues: * CVE-2017-5087: Sandbox Escape in IndexedDB * CVE-2017-5088: Out of bounds read in V8 * CVE-2017-5089: Domain spoofing in Omnibox * Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging changes are included: * In about dialog, refer to the build as 'openSUSE build' (boo#1043420) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2017-701 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html E-Mail link for openSUSE-SU-2017:1591-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1043420 SUSE Bug 1043420 https://bugzilla.suse.com/1044690 SUSE Bug 1044690 https://www.suse.com/security/cve/CVE-2017-5087/ SUSE CVE CVE-2017-5087 page https://www.suse.com/security/cve/CVE-2017-5088/ SUSE CVE CVE-2017-5088 page https://www.suse.com/security/cve/CVE-2017-5089/ SUSE CVE CVE-2017-5089 page SUSE Package Hub 12 SP2 chromedriver-59.0.3071.104-23.1 chromium-59.0.3071.104-23.1 chromedriver-59.0.3071.104-23.1 as a component of SUSE Package Hub 12 SP2 chromium-59.0.3071.104-23.1 as a component of SUSE Package Hub 12 SP2 A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape. CVE-2017-5087 SUSE Package Hub 12 SP2:chromedriver-59.0.3071.104-23.1 SUSE Package Hub 12 SP2:chromium-59.0.3071.104-23.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html https://www.suse.com/security/cve/CVE-2017-5087.html CVE-2017-5087 https://bugzilla.suse.com/1044690 SUSE Bug 1044690 Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. CVE-2017-5088 SUSE Package Hub 12 SP2:chromedriver-59.0.3071.104-23.1 SUSE Package Hub 12 SP2:chromium-59.0.3071.104-23.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html https://www.suse.com/security/cve/CVE-2017-5088.html CVE-2017-5088 https://bugzilla.suse.com/1044690 SUSE Bug 1044690 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name. CVE-2017-5089 SUSE Package Hub 12 SP2:chromedriver-59.0.3071.104-23.1 SUSE Package Hub 12 SP2:chromium-59.0.3071.104-23.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html https://www.suse.com/security/cve/CVE-2017-5089.html CVE-2017-5089 https://bugzilla.suse.com/1044690 SUSE Bug 1044690