Kod programskog paketa Chromium uočeni su i ispravljeni sigurnosni nedostaci koje udaljeni napadači mogu iskoristiti za zaobilaženje postavljenih ograničenja i DoS napad.

______________________________________________________________________________
Announcement ID:    openSUSE-SU-2012:0613-1
Rating:             moderate
References:         759381,760264
Cross-References:   CVE-2011-3078,CVE-2011-3079,CVE-2011-3080,CVE-2011-3081,CVE-2012-1521
Affected Products:

openSUSE 12.1

______________________________________________________________________________

Description:

 Chromium version 20.0.1128 fixes several security issues:

- CVE-2011-3078: Use after free in floats handling.
- CVE-2012-1521: Use after free in xml parser.
- CVE-2011-3079: IPC validation failure.
- CVE-2011-3080: Race condition in sandbox IPC
- CVE-2011-3081: Use after free in floats handling.


Patch Instructions: 
   - openSUSE 12.1:

      zypper in -t patch openSUSE-2012-272



Package List: 

   - openSUSE 12.1 (i586 x86_64):

      chromium-20.0.1128.0-1.20.1
      chromium-debuginfo-20.0.1128.0-1.20.1
      chromium-debugsource-20.0.1128.0-1.20.1
      chromium-desktop-gnome-20.0.1128.0-1.20.1
      chromium-desktop-kde-20.0.1128.0-1.20.1
      chromium-suid-helper-20.0.1128.0-1.20.1
      chromium-suid-helper-debuginfo-20.0.1128.0-1.20.1
      libv8-3-3.10.8.1-1.24.1
      libv8-3-debuginfo-3.10.8.1-1.24.1
      v8-debugsource-3.10.8.1-1.24.1
      v8-devel-3.10.8.1-1.24.1
      v8-private-headers-devel-3.10.8.1-1.24.1


References:

http://support.novell.com/security/cve/CVE-2011-3078.html
http://support.novell.com/security/cve/CVE-2011-3079.html
http://support.novell.com/security/cve/CVE-2011-3080.html
http://support.novell.com/security/cve/CVE-2011-3081.html
http://support.novell.com/security/cve/CVE-2012-1521.html
https://bugzilla.novell.com/759381
https://bugzilla.novell.com/760264