chromium important openSUSE 13.1 Update Chromium was updated to 53.0.2785.116 to fix a number of security issus. The following vulnerabilities were fixed in 53.0.2785.113 (boo#992305): - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access - CVE-2016-5174: Popup not correctly suppressed - CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives. The following vulnerabilities were fixed in 53.0.2785.89 (boo#996648): - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free in Blink. - CVE-2016-5151: Use after free in PDFium. - CVE-2016-5152: Heap overflow in PDFium. - CVE-2016-5153: Use after destruction in Blink. - CVE-2016-5154: Heap overflow in PDFium. - CVE-2016-5155: Address bar spoofing. - CVE-2016-5156: Use after free in event bindings. - CVE-2016-5157: Heap overflow in PDFium. - CVE-2016-5158: Heap overflow in PDFium. - CVE-2016-5159: Heap overflow in PDFium. - CVE-2016-5161: Type confusion in Blink. - CVE-2016-5162: Extensions web accessible resources bypass. - CVE-2016-5163: Address bar spoofing. - CVE-2016-5164: Universal XSS using DevTools. - CVE-2016-5165: Script injection in DevTools. - CVE-2016-5166: SMB Relay Attack via Save Page As. - CVE-2016-5160: Extensions web accessible resources bypass. The following security issues were fixed in 52.0.2743.116(boo#992305) - CVE-2016-5141: Address bar spoofing (boo#992314) - CVE-2016-5142: Use-after-free in Blink (boo#992313) - CVE-2016-5139: Heap overflow in pdfium (boo#992311) - CVE-2016-5140: Heap overflow in pdfium (boo#992310) - CVE-2016-5145: Same origin bypass for images in Blink (boo#992320) - CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319) - CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315) - CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309) A number of tracked build system fixes are included. (boo#996032, boo#99606, boo#995932) rpmlint and rpmlint-mini were updated to work around a memory exhaustion problem with this package on 32 bit (boo#969732). chromedriver-53.0.2785.116-159.8.i586.rpm chromedriver-debuginfo-53.0.2785.116-159.8.i586.rpm chromium-53.0.2785.116-159.8.i586.rpm chromium-53.0.2785.116-159.8.src.rpm chromium-debuginfo-53.0.2785.116-159.8.i586.rpm chromium-desktop-gnome-53.0.2785.116-159.8.i586.rpm chromium-desktop-kde-53.0.2785.116-159.8.i586.rpm chromium-ffmpegsumo-53.0.2785.116-159.8.i586.rpm chromium-ffmpegsumo-debuginfo-53.0.2785.116-159.8.i586.rpm rpmlint-mini-1.5-2.4.4.i586.rpm rpmlint-mini-1.5-2.4.4.src.rpm rpmlint-mini-debuginfo-1.5-2.4.4.i586.rpm rpmlint-mini-debugsource-1.5-2.4.4.i586.rpm rpmlint-1.5-12.4.1.noarch.rpm rpmlint-1.5-12.4.1.src.rpm chromedriver-53.0.2785.116-159.8.x86_64.rpm chromedriver-debuginfo-53.0.2785.116-159.8.x86_64.rpm chromium-53.0.2785.116-159.8.x86_64.rpm chromium-debuginfo-53.0.2785.116-159.8.x86_64.rpm chromium-desktop-gnome-53.0.2785.116-159.8.x86_64.rpm chromium-desktop-kde-53.0.2785.116-159.8.x86_64.rpm chromium-ffmpegsumo-53.0.2785.116-159.8.x86_64.rpm chromium-ffmpegsumo-debuginfo-53.0.2785.116-159.8.x86_64.rpm rpmlint-mini-1.5-2.4.4.x86_64.rpm rpmlint-mini-debuginfo-1.5-2.4.4.x86_64.rpm rpmlint-mini-debugsource-1.5-2.4.4.x86_64.rpm