OPENSUSE-SU-2016:2311-1: chromium&distro=SUSE Package Hub 12 SUSE Linux Enterprise
Vulnerability summary
OPENSUSE-SU-2016:2311-1 is a vulnerability in chromium&distro=SUSE Package Hub 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 14-09-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Recommended update for chromium Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access - CVE-2016-5174: Popup not correctly suppressed - CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives. The following upstream fixes are included: - SPDY crasher fixes - Disable NV12 DXGI video on AMD - Forward --password-store switch to os_crypt - Tell the kernel to discard USB requests when they time out. - disallow WKBackForwardListItem navigations for pushState pages - arc: bluetooth: Fix advertised uuid - fix conflicting PendingIntent for stop button and swipe away The widevine plugin was re-enabled (boo#998328).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- chromium&distro=SUSE Package Hub 12< 53.0.2785.113-100.1
1 vendor · 1 product
References
9 links- lists.opensuse.org/archives/…Advisory
- bugzilla.suse.com/998328REPORT
- bugzilla.suse.com/998743REPORT