OPENSUSE-SU-2020:0389-1: chromium&distro=SUSE Package Hub 15 SP1 SUSE Linux Enterprise
Vulnerability summary
OPENSUSE-SU-2020:0389-1 is a vulnerability in chromium&distro=SUSE Package Hub 15 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 9 · Downstream 0 · Related 9Timeline
- 27-03-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for chromium This update for chromium to version 80.0.3987.149 fixes the following issues: Chromium was update to 80.0.3987.149 (bsc#1167090): - CVE-2020-6422: Fixed a use after free in WebGL. - CVE-2020-6424: Fixed a use after free in media. - CVE-2020-6425: Fixed an insufficient policy enforcement in extensions. - CVE-2020-6426: Fixed an inappropriate implementation in V8. - CVE-2020-6427: Fixed a use after free in audio. - CVE-2020-6428: Fixed a use after free in audio. - CVE-2020-6429: Fixed a use after free in audio. - CVE-2019-20503: Fixed an out of bounds read in usersctplib. - CVE-2020-6449: Fixed a use after free in audio. This update was imported from the openSUSE:Leap:15.1:Update update project.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- chromium&distro=SUSE Package Hub 15 SP1< 80.0.3987.149-bp151.3.63.3
1 vendor · 1 product
References
11 links- lists.opensuse.org/archives/…Advisory