openSUSE-SU-2026:22041-1

openSUSE-SU-2026:22041-1 · Security update for chromium

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354): * CVE-2026-106382: Use after free in Chromecast * CVE-2026-106197: Use after free in Browser * CVE-2026-106358: Use after free in Navigation * CVE-2026-106347: Use after free in Track * CVE-2026-106245: Uninitialized resource in ANGLE * CVE-2026-106327: Incorrect authorization in Core * CVE-2026-106366: Incomplete cleanup in CustomTabs * CVE-2026-106258: Uninitialized resource in ANGLE * CVE-2026-106376: Uninitialized resource in ANGLE * CVE-2026-106308: Incorrect reference resolution in Autofill * CVE-2026-106215: Uninitialized resource in ANGLE * CVE-2026-106369: Missing authorization in Translate * CVE-2026-106293: Type confusion in ANGLE * CVE-2026-106377: Race condition in Fonts * CVE-2026-106412: Race condition in Core * CVE-2026-106243: Incomplete cleanup in Proxy Auth * CVE-2026-106214: Information leak in Proxy * CVE-2026-106364: Incorrect authorization in Omnibox * CVE-2026-106239: Integer overflow in WebGL * CVE-2026-106426: Race condition in Fonts * CVE-2026-106419: Use after free in ANGLE * CVE-2026-106396: Improper input validation in Omnibox * CVE-2026-106323: Missing authorization in Chrome for iOS * CVE-2026-106231: Uninitialized resource in Dawn * CVE-2026-106202: Uninitialized resource in ANGLE * CVE-2026-106273: Uninitialized resource in Video * CVE-2026-106203: Incomplete cleanup in Autofill * CVE-2026-106332: Integer overflow in Compositing * CVE-2026-106281: Use after free in Tint * CVE-2026-106298: Use after free in Chrome Tabs * CVE-2026-106193: Use after free in Parser * CVE-2026-106255: Race condition in V8 * CVE-2026-106393: Use after free in Storage * CVE-2026-106227: Use after free in Core * CVE-2026-106379: Uninitialized resource in Skia * CVE-2026-106211: Use after free in TabStrip * CVE-2026-106329: Incorrect authorization in FileSystem * CVE-2026-106248: Use after free in Bindings * CVE-2026-106235: Use after free in WebAudio * CVE-2026-106257: Use after free in HTML * CVE-2026-106268: Use after free in WebRTC * CVE-2026-106278: Use after free in Select * CVE-2026-106233: Use after free in Metrics * CVE-2026-106318: Use after free in Media * CVE-2026-106411: Use after free in Parser * CVE-2026-106423: Use after free in Media * CVE-2026-106346: Improper state validation in DevTools * CVE-2026-106190: Use after free in Media * CVE-2026-106357: Use after free in WebRTC * CVE-2026-106240: Type confusion in V8 * CVE-2026-106184: Uninitialized resource in Media * CVE-2026-106383: Use after free in Media * CVE-2026-106349: Use after free in V8 * CVE-2026-106421: Use after free in PDF * CVE-2026-106204: Use after free in PDF * CVE-2026-106200: Use after free in Track * CVE-2026-106265: UI misrepresentation in File * CVE-2026-106238: Race condition in Fonts * CVE-2026-106324: Incorrect authorization in WebAppInstalls * CVE-2026-106420: Incorrect calculation in API * CVE-2026-106222: Incorrect authorization in Sync * CVE-2026-106208: Missing authorization in API * CVE-2026-106286: Confused deputy in Omnibox * CVE-2026-106181: Incorrect reference resolution in DevTools * CVE-2026-106315: Use after free in Modularization * CVE-2026-106274: Incorrect reference resolution in Browser * CVE-2026-106365: Missing authorization in Animation * CVE-2026-106267: Missing authorization in Network * CVE-2026-106194: Missing authorization in WebAppInstalls * CVE-2026-106313: Incorrect authorization in Browser * CVE-2026-106283: Use after free in Streaming * CVE-2026-106291: Use after free in GarbageCollection * CVE-2026-106300: Race condition in CacheStorage * CVE-2026-106314: Incorrect authorization in Bluetooth * CVE-2026-106223: Uninitialized resource in GPU * CVE-2026-106242: Information leak in Omnibox * CVE-2026-106241: Incorrect authorization in Search * CVE-2026-106381: Incorrect authorization in Passwords * CVE-2026-106217: Missing authorization in Google Lens * CVE-2026-106425: Missing authorization in BrowserTag * CVE-2026-106225: Missing authorization in Autofill * CVE-2026-106363: Missing authorization in FullScreen * CVE-2026-106266: Confused deputy in Contextual Tasks * CVE-2026-106189: Code injection in ReaderMode * CVE-2026-106335: Use after free in Media * CVE-2026-106415: Information leak in Enterprise * CVE-2026-106224: Missing authorization in Google Lens * CVE-2026-106185: Improper input validation in Viz * CVE-2026-106244: Incorrect authorization in Permissions * CVE-2026-106407: Incorrect authorization in GetUserMedia * CVE-2026-106389: Incorrect authorization in USB * CVE-2026-106397: Incorrect authorization in Mobile * CVE-2026-106196: Missing authorization in Navigation * CVE-2026-106414: Improper input validation in Mobile * CVE-2026-106408: Protection mechanism failure in Mobile * CVE-2026-106261: Uninitialized resource in Video * CVE-2026-106406: Missing authorization in Mobile * CVE-2026-106290: Uninitialized resource in GPU * CVE-2026-106378: Privilege elevation in Sandbox * CVE-2026-106198: Missing authorization in FileSystem * CVE-2026-106326: Confused deputy in UI * CVE-2026-106354: Improper resource exposure in Extensions * CVE-2026-106342: Information leak in Autofill * CVE-2026-106424: Information leak in Audio * CVE-2026-106253: Incorrect authorization in Extensions * CVE-2026-106279: Incorrect reference resolution in Passwords * CVE-2026-106361: Incorrect provision of specified functionality in Mobile * CVE-2026-106402: Incorrect authorization in Extensions * CVE-2026-106311: Clickjacking in PermissionElement * CVE-2026-106246: Incorrect authorization in Browser * CVE-2026-106302: UI misrepresentation in PermissionElement * CVE-2026-106416: Code injection in Extensions * CVE-2026-106182: UI misrepresentation in Paint * CVE-2026-106282: UI misrepresentation in WebOTP * CVE-2026-106392: Information leak in WebAudio * CVE-2026-106188: Confused deputy in SignIn * CVE-2026-106370: Uninitialized resource in GPU * CVE-2026-106356: Clickjacking in EVP * CVE-2026-106405: Race condition in CustomTabs * CVE-2026-106322: Open redirect in AppManifest * CVE-2026-106280: Incorrect authorization in PermissionElement * CVE-2026-106206: Improper input validation in Mobile * CVE-2026-106180: Observable discrepancy in Animation * CVE-2026-106303: Observable discrepancy in Autofill AI * CVE-2026-106201: Race condition in V8 * CVE-2026-106333: Incorrect authorization in Input * CVE-2026-106228: Confused deputy in Google Lens * CVE-2026-106289: Missing authorization in FedCM * CVE-2026-106277: Information leak in Animation * CVE-2026-106410: Missing authorization in Permissions * CVE-2026-106284: Out of bounds read in Printing * CVE-2026-106209: UI misrepresentation in Mobile * CVE-2026-106216: Cross-site request forgery in ReadingList * CVE-2026-106328: Incorrect authorization in PDF * CVE-2026-106387: Missing authorization in Mobile * CVE-2026-106400: Clickjacking in Messages * CVE-2026-106205: Missing authorization in Passwords * CVE-2026-106213: Race condition in WebAudio * CVE-2026-106230: Incorrect reference resolution in Offline * CVE-2026-106367: Missing authorization in Mobile * CVE-2026-106226: Improper input validation in Compositing * CVE-2026-106229: UI misrepresentation in FileSystem * CVE-2026-106232: UI misrepresentation in Browser * CVE-2026-106391: Incorrect authorization in WebShare * CVE-2026-106336: Observable discrepancy in Paint * CVE-2026-106403: Incorrect authorization in Accessibility * CVE-2026-106373: Use after free in Fonts * CVE-2026-106301: Confused deputy in Contextual Tasks * CVE-2026-106292: Buffer overflow in Fonts * CVE-2026-106262: Incomplete cleanup in G

Correctif disponible

Publication

2026-10-09T02:54:37Z

Mise à jour

2026-10-09T18:15:03.738867401Z

Pile logicielle: system

Vérifiez votre serveur →