{"schemaVersion":3,"id":"OPENSUSE-SU-2021:0401-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for chromium\n\nThis update for chromium fixes the following issues:\n\nUpdate to 89.0.4389.72 (boo#1182358, boo#1182960):\n\n- CVE-2021-21159: Heap buffer overflow in TabStrip.\n- CVE-2021-21160: Heap buffer overflow in WebAudio.\n- CVE-2021-21161: Heap buffer overflow in TabStrip.\n- CVE-2021-21162: Use after free in WebRTC.\n- CVE-2021-21163: Insufficient data validation in Reader Mode.\n- CVE-2021-21164: Insufficient data validation in Chrome for iOS.\n- CVE-2021-21165: Object lifecycle issue in audio.\n- CVE-2021-21166: Object lifecycle issue in audio.\n- CVE-2021-21167: Use after free in bookmarks.\n- CVE-2021-21168: Insufficient policy enforcement in appcache.\n- CVE-2021-21169: Out of bounds memory access in V8.\n- CVE-2021-21170: Incorrect security UI in Loader.\n- CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.\n- CVE-2021-21172: Insufficient policy enforcement in File System API.\n- CVE-2021-21173: Side-channel information leakage in Network Internals.\n- CVE-2021-21174: Inappropriate implementation in Referrer.\n- CVE-2021-21175: Inappropriate implementation in Site isolation.\n- CVE-2021-21176: Inappropriate implementation in full screen mode.\n- CVE-2021-21177: Insufficient policy enforcement in Autofill.\n- CVE-2021-21178: Inappropriate implementation in Compositing.\n- CVE-2021-21179: Use after free in Network Internals.\n- CVE-2021-21180: Use after free in tab search.\n- CVE-2020-27844: Heap buffer overflow in OpenJPEG.\n- CVE-2021-21181: Side-channel information leakage in autofill.\n- CVE-2021-21182: Insufficient policy enforcement in navigations.\n- CVE-2021-21183: Inappropriate implementation in performance APIs.\n- CVE-2021-21184: Inappropriate implementation in performance APIs.\n- CVE-2021-21185: Insufficient policy enforcement in extensions.\n- CVE-2021-21186: Insufficient policy enforcement in QR scanning.\n- CVE-2021-21187: Insufficient data validation in URL formatting.\n- CVE-2021-21188: Use after free in Blink.\n- CVE-2021-21189: Insufficient policy enforcement in payments.\n- CVE-2021-21190: Uninitialized Use in PDFium.\n- CVE-2021-21149: Stack overflow in Data Transfer.\n- CVE-2021-21150: Use after free in Downloads.\n- CVE-2021-21151: Use after free in Payments.\n- CVE-2021-21152: Heap buffer overflow in Media.\n- CVE-2021-21153: Stack overflow in GPU Process.\n- CVE-2021-21154: Heap buffer overflow in Tab Strip.\n- CVE-2021-21155: Heap buffer overflow in Tab Strip.\n- CVE-2021-21156: Heap buffer overflow in V8.\n- CVE-2021-21157: Use after free in Web Sockets.\n- Fixed Sandbox with glibc 2.33 (boo#1182233)\n- Fixed an issue where chromium hangs on opening (boo#1182775).\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","dates":{"published":"2021-03-09T19:05:08.000Z","modified":"2026-02-04T03:21:08.133Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"chromium&distro=SUSE Package Hub 15 SP2","name":"chromium","label":"chromium&distro=SUSE Package Hub 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/chromium&distro=SUSE Package Hub 15 SP2","purlType":"rpm","versions":[{"text":"< 89.0.4389.72-bp152.2.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 89.0.4389.72-bp152.2.62.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1182233","label":"bugzilla.suse.com/1182233","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182358","label":"bugzilla.suse.com/1182358","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182775","label":"bugzilla.suse.com/1182775","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27844","label":"www.suse.com/security/cve/CVE-2020-27844","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21149","label":"www.suse.com/security/cve/CVE-2021-21149","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21150","label":"www.suse.com/security/cve/CVE-2021-21150","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21151","label":"www.suse.com/security/cve/CVE-2021-21151","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21152","label":"www.suse.com/security/cve/CVE-2021-21152","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21153","label":"www.suse.com/security/cve/CVE-2021-21153","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21154","label":"www.suse.com/security/cve/CVE-2021-21154","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21155","label":"www.suse.com/security/cve/CVE-2021-21155","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21156","label":"www.suse.com/security/cve/CVE-2021-21156","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21157","label":"www.suse.com/security/cve/CVE-2021-21157","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21159","label":"www.suse.com/security/cve/CVE-2021-21159","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21160","label":"www.suse.com/security/cve/CVE-2021-21160","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21161","label":"www.suse.com/security/cve/CVE-2021-21161","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21162","label":"www.suse.com/security/cve/CVE-2021-21162","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21163","label":"www.suse.com/security/cve/CVE-2021-21163","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21164","label":"www.suse.com/security/cve/CVE-2021-21164","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21165","label":"www.suse.com/security/cve/CVE-2021-21165","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21166","label":"www.suse.com/security/cve/CVE-2021-21166","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21167","label":"www.suse.com/security/cve/CVE-2021-21167","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21168","label":"www.suse.com/security/cve/CVE-2021-21168","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21169","label":"www.suse.com/security/cve/CVE-2021-21169","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21170","label":"www.suse.com/security/cve/CVE-2021-21170","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21171","label":"www.suse.com/security/cve/CVE-2021-21171","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21172","label":"www.suse.com/security/cve/CVE-2021-21172","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21173","label":"www.suse.com/security/cve/CVE-2021-21173","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21174","label":"www.suse.com/security/cve/CVE-2021-21174","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21175","label":"www.suse.com/security/cve/CVE-2021-21175","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21176","label":"www.suse.com/security/cve/CVE-2021-21176","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21177","label":"www.suse.com/security/cve/CVE-2021-21177","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21178","label":"www.suse.com/security/cve/CVE-2021-21178","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21179","label":"www.suse.com/security/cve/CVE-2021-21179","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21180","label":"www.suse.com/security/cve/CVE-2021-21180","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21181","label":"www.suse.com/security/cve/CVE-2021-21181","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21182","label":"www.suse.com/security/cve/CVE-2021-21182","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21183","label":"www.suse.com/security/cve/CVE-2021-21183","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21184","label":"www.suse.com/security/cve/CVE-2021-21184","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21185","label":"www.suse.com/security/cve/CVE-2021-21185","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21186","label":"www.suse.com/security/cve/CVE-2021-21186","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21187","label":"www.suse.com/security/cve/CVE-2021-21187","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21188","label":"www.suse.com/security/cve/CVE-2021-21188","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21189","label":"www.suse.com/security/cve/CVE-2021-21189","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21190","label":"www.suse.com/security/cve/CVE-2021-21190","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-27844","CVE-2021-21149","CVE-2021-21150","CVE-2021-21151","CVE-2021-21152","CVE-2021-21153","CVE-2021-21154","CVE-2021-21155","CVE-2021-21156","CVE-2021-21157","CVE-2021-21159","CVE-2021-21160","CVE-2021-21161","CVE-2021-21162","CVE-2021-21163","CVE-2021-21164","CVE-2021-21165","CVE-2021-21166","CVE-2021-21167","CVE-2021-21168","CVE-2021-21169","CVE-2021-21170","CVE-2021-21171","CVE-2021-21172","CVE-2021-21173","CVE-2021-21174","CVE-2021-21175","CVE-2021-21176","CVE-2021-21177","CVE-2021-21178","CVE-2021-21179","CVE-2021-21180","CVE-2021-21181","CVE-2021-21182","CVE-2021-21183","CVE-2021-21184","CVE-2021-21185","CVE-2021-21186","CVE-2021-21187","CVE-2021-21188","CVE-2021-21189","CVE-2021-21190"],"downstream":[],"duplicates":[],"related":["CVE-2020-27844","CVE-2021-21149","CVE-2021-21150","CVE-2021-21151","CVE-2021-21152","CVE-2021-21153","CVE-2021-21154","CVE-2021-21155","CVE-2021-21156","CVE-2021-21157","CVE-2021-21159","CVE-2021-21160","CVE-2021-21161","CVE-2021-21162","CVE-2021-21163","CVE-2021-21164","CVE-2021-21165","CVE-2021-21166","CVE-2021-21167","CVE-2021-21168","CVE-2021-21169","CVE-2021-21170","CVE-2021-21171","CVE-2021-21172","CVE-2021-21173","CVE-2021-21174","CVE-2021-21175","CVE-2021-21176","CVE-2021-21177","CVE-2021-21178","CVE-2021-21179","CVE-2021-21180","CVE-2021-21181","CVE-2021-21182","CVE-2021-21183","CVE-2021-21184","CVE-2021-21185","CVE-2021-21186","CVE-2021-21187","CVE-2021-21188","CVE-2021-21189","CVE-2021-21190"]},"timeline":[{"kind":"published","date":"2021-03-09T19:05:08.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:21:08.133Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:35:04.549Z","stale":false,"partial":false}}