opensuse-su-2016:1869-1
Vulnerability from csaf_opensuse
Published
2016-07-25 09:41
Modified
2016-07-25 09:41
Summary
Security update for Chromium

Notes

Title of the patch
Security update for Chromium
Description of the patch
Chromium was updated to 52.0.2743.82 to fix the following security issues (boo#989901): - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly - CVE-2016-1710: Same-origin bypass in Blink - CVE-2016-1711: Same-origin bypass in Blink - CVE-2016-5127: Use-after-free in Blink - CVE-2016-5128: Same-origin bypass in V8 - CVE-2016-5129: Memory corruption in V8 - CVE-2016-5130: URL spoofing - CVE-2016-5131: Use-after-free in libxml - CVE-2016-5132: Limited same-origin bypass in Service Workers - CVE-2016-5133: Origin confusion in proxy authentication - CVE-2016-5134: URL leakage via PAC script - CVE-2016-5135: Content-Security-Policy bypass - CVE-2016-5136: Use after free in extensions - CVE-2016-5137: History sniffing with HSTS and CSP - CVE-2016-1705: Various fixes from internal audits, fuzzing and other initiatives
Patchnames
openSUSE-2016-900
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for Chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "Chromium was updated to 52.0.2743.82 to fix the following security issues (boo#989901):\n\n- CVE-2016-1706: Sandbox escape in PPAPI\n- CVE-2016-1707: URL spoofing on iOS\n- CVE-2016-1708: Use-after-free in Extensions\n- CVE-2016-1709: Heap-buffer-overflow in sfntly\n- CVE-2016-1710: Same-origin bypass in Blink\n- CVE-2016-1711: Same-origin bypass in Blink\n- CVE-2016-5127: Use-after-free in Blink\n- CVE-2016-5128: Same-origin bypass in V8\n- CVE-2016-5129: Memory corruption in V8\n- CVE-2016-5130: URL spoofing\n- CVE-2016-5131: Use-after-free in libxml\n- CVE-2016-5132: Limited same-origin bypass in Service Workers\n- CVE-2016-5133: Origin confusion in proxy authentication\n- CVE-2016-5134: URL leakage via PAC script\n- CVE-2016-5135: Content-Security-Policy bypass\n- CVE-2016-5136: Use after free in extensions\n- CVE-2016-5137: History sniffing with HSTS and CSP\n- CVE-2016-1705: Various fixes from internal audits, fuzzing and other initiatives\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2016-900",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2016_1869-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2016:1869-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R4NHTU4KKV46O6ZC6IR3Z6EDHZB7OQI2/#R4NHTU4KKV46O6ZC6IR3Z6EDHZB7OQI2"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2016:1869-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R4NHTU4KKV46O6ZC6IR3Z6EDHZB7OQI2/#R4NHTU4KKV46O6ZC6IR3Z6EDHZB7OQI2"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 989901",
        "url": "https://bugzilla.suse.com/989901"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1705 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1706 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1707 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1707/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1708 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1709 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1710 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1711 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5127 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5127/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5128 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5128/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5129 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5129/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5130 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5130/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5131 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5131/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5132 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5132/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5133 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5133/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5134 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5134/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5135 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5135/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5136 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5136/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5137 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5137/"
      }
    ],
    "title": "Security update for Chromium",
    "tracking": {
      "current_release_date": "2016-07-25T09:41:24Z",
      "generator": {
        "date": "2016-07-25T09:41:24Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2016:1869-1",
      "initial_release_date": "2016-07-25T09:41:24Z",
      "revision_history": [
        {
          "date": "2016-07-25T09:41:24Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-52.0.2743.82-89.1.x86_64",
                "product": {
                  "name": "chromedriver-52.0.2743.82-89.1.x86_64",
                  "product_id": "chromedriver-52.0.2743.82-89.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-52.0.2743.82-89.1.x86_64",
                "product": {
                  "name": "chromium-52.0.2743.82-89.1.x86_64",
                  "product_id": "chromium-52.0.2743.82-89.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
                "product": {
                  "name": "chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
                  "product_id": "chromium-desktop-gnome-52.0.2743.82-89.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
                "product": {
                  "name": "chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
                  "product_id": "chromium-desktop-kde-52.0.2743.82-89.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64",
                "product": {
                  "name": "chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64",
                  "product_id": "chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 12",
                "product": {
                  "name": "SUSE Package Hub 12",
                  "product_id": "SUSE Package Hub 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-52.0.2743.82-89.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64"
        },
        "product_reference": "chromedriver-52.0.2743.82-89.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-52.0.2743.82-89.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64"
        },
        "product_reference": "chromium-52.0.2743.82-89.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-desktop-gnome-52.0.2743.82-89.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64"
        },
        "product_reference": "chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-desktop-kde-52.0.2743.82-89.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64"
        },
        "product_reference": "chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        },
        "product_reference": "chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-1705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1705",
          "url": "https://www.suse.com/security/cve/CVE-2016-1705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1705",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1705"
    },
    {
      "cve": "CVE-2016-1706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1706",
          "url": "https://www.suse.com/security/cve/CVE-2016-1706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1706",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1706"
    },
    {
      "cve": "CVE-2016-1707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1707",
          "url": "https://www.suse.com/security/cve/CVE-2016-1707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1707",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1707"
    },
    {
      "cve": "CVE-2016-1708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1708",
          "url": "https://www.suse.com/security/cve/CVE-2016-1708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1708",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1708"
    },
    {
      "cve": "CVE-2016-1709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1709",
          "url": "https://www.suse.com/security/cve/CVE-2016-1709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1709",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1709"
    },
    {
      "cve": "CVE-2016-1710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1710",
          "url": "https://www.suse.com/security/cve/CVE-2016-1710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1710",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1710"
    },
    {
      "cve": "CVE-2016-1711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1711",
          "url": "https://www.suse.com/security/cve/CVE-2016-1711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-1711",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1711"
    },
    {
      "cve": "CVE-2016-5127",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5127"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5127",
          "url": "https://www.suse.com/security/cve/CVE-2016-5127"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5127",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5127"
    },
    {
      "cve": "CVE-2016-5128",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5128"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5128",
          "url": "https://www.suse.com/security/cve/CVE-2016-5128"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5128",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5128"
    },
    {
      "cve": "CVE-2016-5129",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5129"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5129",
          "url": "https://www.suse.com/security/cve/CVE-2016-5129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5129",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5129"
    },
    {
      "cve": "CVE-2016-5130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5130",
          "url": "https://www.suse.com/security/cve/CVE-2016-5130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5130",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5130"
    },
    {
      "cve": "CVE-2016-5131",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5131"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5131",
          "url": "https://www.suse.com/security/cve/CVE-2016-5131"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014873 for CVE-2016-5131",
          "url": "https://bugzilla.suse.com/1014873"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069433 for CVE-2016-5131",
          "url": "https://bugzilla.suse.com/1069433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1078813 for CVE-2016-5131",
          "url": "https://bugzilla.suse.com/1078813"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-5131",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5131",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5131"
    },
    {
      "cve": "CVE-2016-5132",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5132"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5132",
          "url": "https://www.suse.com/security/cve/CVE-2016-5132"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5132",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5132"
    },
    {
      "cve": "CVE-2016-5133",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5133"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5133",
          "url": "https://www.suse.com/security/cve/CVE-2016-5133"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5133",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5133"
    },
    {
      "cve": "CVE-2016-5134",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5134"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5134",
          "url": "https://www.suse.com/security/cve/CVE-2016-5134"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5134",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5134"
    },
    {
      "cve": "CVE-2016-5135",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5135"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a \"Content-Security-Policy: referrer origin-when-cross-origin\" header that overrides a \"\u003cMETA name=\u0027referrer\u0027 content=\u0027no-referrer\u0027\u003e\" element.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5135",
          "url": "https://www.suse.com/security/cve/CVE-2016-5135"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5135",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5135"
    },
    {
      "cve": "CVE-2016-5136",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5136"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5136",
          "url": "https://www.suse.com/security/cve/CVE-2016-5136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5136",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5136"
    },
    {
      "cve": "CVE-2016-5137",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5137"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.  NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
          "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5137",
          "url": "https://www.suse.com/security/cve/CVE-2016-5137"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989901 for CVE-2016-5137",
          "url": "https://bugzilla.suse.com/989901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:chromedriver-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-gnome-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-desktop-kde-52.0.2743.82-89.1.x86_64",
            "SUSE Package Hub 12:chromium-ffmpegsumo-52.0.2743.82-89.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-07-25T09:41:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-5137"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.