p PatchFirst

openSUSE-SU-2026:22202-1

openSUSE-SU-2026:22202-1 · Security update for chromium

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for chromium fixes the following issues: Changes in chromium: - Chromium 156.0.8078.73 (boo#1288218): * CVE-2026-118306: Memory corruption in FileSystem * CVE-2026-118331: Improper input validation in FileAPI * CVE-2026-118348: Improper input validation in Skia * CVE-2026-118344: Use after free in Layout * CVE-2026-118357: Use after free in FileSystem * CVE-2026-118318: Improper access control in V8 * CVE-2026-118350: Use after free in Turbolev * CVE-2026-118339: Use after free in Animation * CVE-2026-118305: Memory corruption in Turbolev * CVE-2026-118317: Memory corruption in HTML * CVE-2026-118320: Memory corruption in V8 * CVE-2026-118322: Memory corruption in ANGLE * CVE-2026-118329: Improper input validation in ANGLE * CVE-2026-118354: Improper input validation in Skia * CVE-2026-118340: Memory corruption in Skia * CVE-2026-118321: Improper input validation in Core * CVE-2026-118337: Improper access control in Forms * CVE-2026-118352: Memory corruption in Cache * CVE-2026-118355: Improper input validation in Command * CVE-2026-118307: Use after free in Paint * CVE-2026-118351: Memory corruption in Skia * CVE-2026-118328: Improper input validation in WebRTC * CVE-2026-118333: Missing authorization in Video * CVE-2026-118336: Improper input validation in Headless * CVE-2026-118358: Memory corruption in WebAudio * CVE-2026-118353: Use after free in Paint * CVE-2026-118349: Memory corruption in Payments * CVE-2026-118327: Memory corruption in Media * CVE-2026-118359: Memory corruption in V8 * CVE-2026-118343: Improper input validation in ReadingList * CVE-2026-118311: Memory corruption in Media * CVE-2026-118334: Use after free in ImageCapture * CVE-2026-118332: Improper input validation in Compositing * CVE-2026-118313: Use after free in Video * CVE-2026-118345: Use after free in PDFium * CVE-2026-118304: Improper input validation in SVG * CVE-2026-118316: Improper input validation in V8 * CVE-2026-118346: Use after free in Compositing * CVE-2026-118342: Out of bounds write in Editing * CVE-2026-118310: Improper input validation in Views * CVE-2026-118335: Improper input validation in Metrics * CVE-2026-118308: Use after free in SVG * CVE-2026-118314: Improper input validation in UI * CVE-2026-118347: Use after free in FileSystem * CVE-2026-118341: Use after free in Modularization * CVE-2026-118330: Use after free in Browser * CVE-2026-118315: Improper input validation in SVG * CVE-2026-118356: Use after free in WTF * CVE-2026-118309: Improper input validation in UI * CVE-2026-118319: Memory corruption in Skia * CVE-2026-118312: Memory corruption in Paint * CVE-2026-118338: Use after free in Animation

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • chromium openSUSE:Leap 16.0

    Plages de versions concernées
    • ECOSYSTEM: < 156.0.8078.73-bp160.1.1

    Mettez à jour vers 156.0.8078.73-bp160.1.1

Sources originales

Vérifiez votre serveur →