{"affected":[{"ecosystem_specific":{"binaries":[{"chromedriver":"90.0.4430.212-lp152.2.95.1","chromium":"90.0.4430.212-lp152.2.95.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.2","name":"chromium","purl":"purl:rpm/suse/chromium&distro=openSUSE%20Leap%2015.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"90.0.4430.212-lp152.2.95.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for chromium fixes the following issues:\n\n(This is a rerelease with aarch64 enabled.)\n\nChromium 90.0.4430.212 (boo#1185908)\n\n* CVE-2021-30506: Incorrect security UI in Web App Installs\n* CVE-2021-30507: Inappropriate implementation in Offline\n* CVE-2021-30508: Heap buffer overflow in Media Feeds\n* CVE-2021-30509: Out of bounds write in Tab Strip\n* CVE-2021-30510: Race in Aura\n* CVE-2021-30511: Out of bounds read in Tab Group\n* CVE-2021-30512: Use after free in Notifications\n* CVE-2021-30513: Type Confusion in V8\n* CVE-2021-30514: Use after free in Autofill\n* CVE-2021-30515: Use after free in File API\n* CVE-2021-30516: Heap buffer overflow in History\n* CVE-2021-30517: Type Confusion in V8\n* CVE-2021-30518: Heap buffer overflow in Reader Mode\n* CVE-2021-30519: Use after free in Payments\n* CVE-2021-30520: Use after free in Tab Strip\n- FTP support disabled at runtime by default since release 88.\n  Chromium 91 will remove support for ftp altogether\n  (boo#1185496)\n\n","id":"openSUSE-SU-2021:0762-1","modified":"2021-05-22T05:03:53Z","published":"2021-05-22T05:03:53Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VXXTVK5FWZGMVLWH6O7ONOFANNOOJNWS/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185496"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185716"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185908"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30506"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30507"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30508"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30509"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30510"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30511"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30512"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30513"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30514"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30515"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30516"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30517"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30518"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30519"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30520"}],"related":["CVE-2021-30506","CVE-2021-30507","CVE-2021-30508","CVE-2021-30509","CVE-2021-30510","CVE-2021-30511","CVE-2021-30512","CVE-2021-30513","CVE-2021-30514","CVE-2021-30515","CVE-2021-30516","CVE-2021-30517","CVE-2021-30518","CVE-2021-30519","CVE-2021-30520"],"summary":"Security update for chromium"}