CVE-2020-16004

Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

This update for chromium, gn fixes the following issues:

chromium was updated to 86.0.4240.183 boo#1178375

• CVE-2020-16004: Use after free in user interface.
• CVE-2020-16005: Insufficient policy enforcement in ANGLE.
• CVE-2020-16006: Inappropriate implementation in V8
• CVE-2020-16007: Insufficient data validation in installer.
• CVE-2020-16008: Stack buffer overflow in WebRTC.
• CVE-2020-16009: Inappropriate implementation in V8.
• CVE-2020-16011: Heap buffer overflow in UI on Windows.

Update to 86.0.4240.111 boo#1177936

• CVE-2020-16000: Inappropriate implementation in Blink.

• CVE-2020-16001: Use after free in media.

• CVE-2020-16002: Use after free in PDFium.

• CVE-2020-15999: Heap buffer overflow in Freetype.

• CVE-2020-16003: Use after free in printing.

• chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2

• Remove vdpau->vaapi bridge as it breaks a lot: (fixes welcome by someone else than me)

• Fix cookiemonster:

Update to 86.0.4240.75 boo#1177408:

• CVE-2020-15967: Use after free in payments.
• CVE-2020-15968: Use after free in Blink.
• CVE-2020-15969: Use after free in WebRTC.
• CVE-2020-15970: Use after free in NFC.
• CVE-2020-15971: Use after free in printing.
• CVE-2020-15972: Use after free in audio.
• CVE-2020-15990: Use after free in autofill.
• CVE-2020-15991: Use after free in password manager.
• CVE-2020-15973: Insufficient policy enforcement in extensions.
• CVE-2020-15974: Integer overflow in Blink.
• CVE-2020-15975: Integer overflow in SwiftShader.
• CVE-2020-15976: Use after free in WebXR.
• CVE-2020-6557: Inappropriate implementation in networking.
• CVE-2020-15977: Insufficient data validation in dialogs.
• CVE-2020-15978: Insufficient data validation in navigation.
• CVE-2020-15979: Inappropriate implementation in V8.
• CVE-2020-15980: Insufficient policy enforcement in Intents.
• CVE-2020-15981: Out of bounds read in audio.
• CVE-2020-15982: Side-channel information leakage in cache.
• CVE-2020-15983: Insufficient data validation in webUI.
• CVE-2020-15984: Insufficient policy enforcement in Omnibox.
• CVE-2020-15985: Inappropriate implementation in Blink.
• CVE-2020-15986: Integer overflow in media.
• CVE-2020-15987: Use after free in WebRTC.
• CVE-2020-15992: Insufficient policy enforcement in networking.
• CVE-2020-15988: Insufficient policy enforcement in downloads.
• CVE-2020-15989: Uninitialized Use in PDFium.

• Update to 0.1807:

  • no upstream changelog

This update for chromium fixes the following issues:

• Update to 86.0.4240.183 boo#1178375
  • CVE-2020-16004: Use after free in user interface.
  • CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  • CVE-2020-16006: Inappropriate implementation in V8
  • CVE-2020-16007: Insufficient data validation in installer.
  • CVE-2020-16008: Stack buffer overflow in WebRTC.
  • CVE-2020-16009: Inappropriate implementation in V8.
  • CVE-2020-16011: Heap buffer overflow in UI on Windows.

This update for chromium fixes the following issues:

• Update to 86.0.4240.183 boo#1178375
  • CVE-2020-16004: Use after free in user interface.
  • CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  • CVE-2020-16006: Inappropriate implementation in V8
  • CVE-2020-16007: Insufficient data validation in installer.
  • CVE-2020-16008: Stack buffer overflow in WebRTC.
  • CVE-2020-16009: Inappropriate implementation in V8.
  • CVE-2020-16011: Heap buffer overflow in UI on Windows.

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for opera fixes the following issues:

Opera was updated to version 72.0.3815.320

• CHR-8177 Update chromium on desktop-stable-86-3815 to 86.0.4240.183

• DNA-89748 ‘Manage Extensions’ dialog is displayed with preloaded extensions

• DNA-89766 Address bar does not respond to actions

• The update to chromium 86.0.4240.183 fixes following issues: CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007, CVE-2020-16008, CVE-2020-16009, CVE-2020-16011

• Update to version 72.0.3815.200

  • DNA-87150 Speed Dial tile can’t be dragged to proper place
  • DNA-89632 Improve hovering over icons
  • DNA-89647 [Light mode] Wrong URL color in ‘Add Site’ section
  • DNA-89791 Typo in Spanish

• The update to chromium 86.0.4240.111 fixes following issues: CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-15999, CVE-2020-16003

• Complete Opera 72.0 changelog at: https://blogs.opera.com/desktop/changelog-for-72/

• Update to version 71.0.3770.271

  • DNA-88353 Crash at opera::TabCyclerView::HighlightContents (content::WebContents*, bool)
  • DNA-89177 Device update request should only be called when FCM token has changed
  • DNA-89186 Handle device expired case in all server calls
  • DNA-89202 Pages are rendered in dark mode when force dark mode prefs were synced from Opera GX
  • DNA-89247 [Mac] Fullscreen video broken if sidebar is hidden
  • DNA-89298 Some elements of VPN popup are misaligned to design
  • DNA-89305 Crash after closing Downloads pop-up

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.