CVE-2020-16009

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-16009: Inappropriate implementation in V8

• https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009

Google is aware of reports that exploits for CVE-2020-16009 exist in the wild.

Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

There is currently little to no public information on the issue other than it has been flagged as High severity.

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

This update for chromium, gn fixes the following issues:

chromium was updated to 86.0.4240.183 boo#1178375

• CVE-2020-16004: Use after free in user interface.
• CVE-2020-16005: Insufficient policy enforcement in ANGLE.
• CVE-2020-16006: Inappropriate implementation in V8
• CVE-2020-16007: Insufficient data validation in installer.
• CVE-2020-16008: Stack buffer overflow in WebRTC.
• CVE-2020-16009: Inappropriate implementation in V8.
• CVE-2020-16011: Heap buffer overflow in UI on Windows.

Update to 86.0.4240.111 boo#1177936

• CVE-2020-16000: Inappropriate implementation in Blink.

• CVE-2020-16001: Use after free in media.

• CVE-2020-16002: Use after free in PDFium.

• CVE-2020-15999: Heap buffer overflow in Freetype.

• CVE-2020-16003: Use after free in printing.

• chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2

• Remove vdpau->vaapi bridge as it breaks a lot: (fixes welcome by someone else than me)

• Fix cookiemonster:

Update to 86.0.4240.75 boo#1177408:

• CVE-2020-15967: Use after free in payments.
• CVE-2020-15968: Use after free in Blink.
• CVE-2020-15969: Use after free in WebRTC.
• CVE-2020-15970: Use after free in NFC.
• CVE-2020-15971: Use after free in printing.
• CVE-2020-15972: Use after free in audio.
• CVE-2020-15990: Use after free in autofill.
• CVE-2020-15991: Use after free in password manager.
• CVE-2020-15973: Insufficient policy enforcement in extensions.
• CVE-2020-15974: Integer overflow in Blink.
• CVE-2020-15975: Integer overflow in SwiftShader.
• CVE-2020-15976: Use after free in WebXR.
• CVE-2020-6557: Inappropriate implementation in networking.
• CVE-2020-15977: Insufficient data validation in dialogs.
• CVE-2020-15978: Insufficient data validation in navigation.
• CVE-2020-15979: Inappropriate implementation in V8.
• CVE-2020-15980: Insufficient policy enforcement in Intents.
• CVE-2020-15981: Out of bounds read in audio.
• CVE-2020-15982: Side-channel information leakage in cache.
• CVE-2020-15983: Insufficient data validation in webUI.
• CVE-2020-15984: Insufficient policy enforcement in Omnibox.
• CVE-2020-15985: Inappropriate implementation in Blink.
• CVE-2020-15986: Integer overflow in media.
• CVE-2020-15987: Use after free in WebRTC.
• CVE-2020-15992: Insufficient policy enforcement in networking.
• CVE-2020-15988: Insufficient policy enforcement in downloads.
• CVE-2020-15989: Uninitialized Use in PDFium.

• Update to 0.1807:

  • no upstream changelog

This update for chromium fixes the following issues:

• Update to 86.0.4240.183 boo#1178375
  • CVE-2020-16004: Use after free in user interface.
  • CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  • CVE-2020-16006: Inappropriate implementation in V8
  • CVE-2020-16007: Insufficient data validation in installer.
  • CVE-2020-16008: Stack buffer overflow in WebRTC.
  • CVE-2020-16009: Inappropriate implementation in V8.
  • CVE-2020-16011: Heap buffer overflow in UI on Windows.

This update for chromium fixes the following issues:

• Update to 86.0.4240.183 boo#1178375
  • CVE-2020-16004: Use after free in user interface.
  • CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  • CVE-2020-16006: Inappropriate implementation in V8
  • CVE-2020-16007: Insufficient data validation in installer.
  • CVE-2020-16008: Stack buffer overflow in WebRTC.
  • CVE-2020-16009: Inappropriate implementation in V8.
  • CVE-2020-16011: Heap buffer overflow in UI on Windows.

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for opera fixes the following issues:

Opera was updated to version 72.0.3815.320

• CHR-8177 Update chromium on desktop-stable-86-3815 to 86.0.4240.183

• DNA-89748 ‘Manage Extensions’ dialog is displayed with preloaded extensions

• DNA-89766 Address bar does not respond to actions

• The update to chromium 86.0.4240.183 fixes following issues: CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007, CVE-2020-16008, CVE-2020-16009, CVE-2020-16011

• Update to version 72.0.3815.200

  • DNA-87150 Speed Dial tile can’t be dragged to proper place
  • DNA-89632 Improve hovering over icons
  • DNA-89647 [Light mode] Wrong URL color in ‘Add Site’ section
  • DNA-89791 Typo in Spanish

• The update to chromium 86.0.4240.111 fixes following issues: CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-15999, CVE-2020-16003

• Complete Opera 72.0 changelog at: https://blogs.opera.com/desktop/changelog-for-72/

• Update to version 71.0.3770.271

  • DNA-88353 Crash at opera::TabCyclerView::HighlightContents (content::WebContents*, bool)
  • DNA-89177 Device update request should only be called when FCM token has changed
  • DNA-89186 Handle device expired case in all server calls
  • DNA-89202 Pages are rendered in dark mode when force dark mode prefs were synced from Opera GX
  • DNA-89247 [Mac] Fullscreen video broken if sidebar is hidden
  • DNA-89298 Some elements of VPN popup are misaligned to design
  • DNA-89305 Crash after closing Downloads pop-up

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.