7892 Security update for chromium important openSUSE Leap 42.3 Update ports This update for Chromium to version 65.0.3325.146 fixes the following issues: - CVE-2017-11215: Use after free in Flash - CVE-2017-11225: Use after free in Flash - CVE-2018-6060: Use after free in Blink - CVE-2018-6061: Race condition in V8 - CVE-2018-6062: Heap buffer overflow in Skia - CVE-2018-6057: Incorrect permissions on shared memory - CVE-2018-6063: Incorrect permissions on shared memory - CVE-2018-6064: Type confusion in V8 - CVE-2018-6065: Integer overflow in V8 - CVE-2018-6066: Same Origin Bypass via canvas - CVE-2018-6067: Buffer overflow in Skia - CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab - CVE-2018-6069: Stack buffer overflow in Skia - CVE-2018-6070: CSP bypass through extensions - CVE-2018-6071: Heap bufffer overflow in Skia - CVE-2018-6072: Integer overflow in PDFium - CVE-2018-6073: Heap bufffer overflow in WebGL - CVE-2018-6074: Mark-of-the-Web bypass - CVE-2018-6075: Overly permissive cross origin downloads - CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink - CVE-2018-6077: Timing attack using SVG filters - CVE-2018-6078: URL Spoof in OmniBox - CVE-2018-6079: Information disclosure via texture data in WebGL - CVE-2018-6080: Information disclosure in IPC call - CVE-2018-6081: XSS in interstitials - CVE-2018-6082: Circumvention of port blocking - CVE-2018-6083: Incorrect processing of AppManifests Harfbuzz was updated to 1.7.5 as a dependency (bsc#1084711). harfbuzz-1.7.5-7.3.1.src.rpm harfbuzz-debugsource-1.7.5-7.3.1.ppc64le.rpm harfbuzz-devel-1.7.5-7.3.1.ppc64le.rpm harfbuzz-tools-1.7.5-7.3.1.ppc64le.rpm harfbuzz-tools-debuginfo-1.7.5-7.3.1.ppc64le.rpm libharfbuzz-gobject0-1.7.5-7.3.1.ppc64le.rpm libharfbuzz-gobject0-debuginfo-1.7.5-7.3.1.ppc64le.rpm libharfbuzz-icu0-1.7.5-7.3.1.ppc64le.rpm libharfbuzz-icu0-debuginfo-1.7.5-7.3.1.ppc64le.rpm libharfbuzz0-1.7.5-7.3.1.ppc64le.rpm libharfbuzz0-debuginfo-1.7.5-7.3.1.ppc64le.rpm typelib-1_0-HarfBuzz-0_0-1.7.5-7.3.1.ppc64le.rpm harfbuzz-debugsource-1.7.5-7.3.1.aarch64.rpm harfbuzz-devel-1.7.5-7.3.1.aarch64.rpm harfbuzz-tools-1.7.5-7.3.1.aarch64.rpm harfbuzz-tools-debuginfo-1.7.5-7.3.1.aarch64.rpm libharfbuzz-gobject0-1.7.5-7.3.1.aarch64.rpm libharfbuzz-gobject0-debuginfo-1.7.5-7.3.1.aarch64.rpm libharfbuzz-icu0-1.7.5-7.3.1.aarch64.rpm libharfbuzz-icu0-64bit-1.7.5-7.3.1.aarch64_ilp32.rpm libharfbuzz-icu0-debuginfo-1.7.5-7.3.1.aarch64.rpm libharfbuzz-icu0-debuginfo-64bit-1.7.5-7.3.1.aarch64_ilp32.rpm libharfbuzz0-1.7.5-7.3.1.aarch64.rpm libharfbuzz0-64bit-1.7.5-7.3.1.aarch64_ilp32.rpm libharfbuzz0-debuginfo-1.7.5-7.3.1.aarch64.rpm libharfbuzz0-debuginfo-64bit-1.7.5-7.3.1.aarch64_ilp32.rpm typelib-1_0-HarfBuzz-0_0-1.7.5-7.3.1.aarch64.rpm harfbuzz-debugsource-1.7.5-7.3.1.armv7hl.rpm harfbuzz-devel-1.7.5-7.3.1.armv7hl.rpm harfbuzz-tools-1.7.5-7.3.1.armv7hl.rpm harfbuzz-tools-debuginfo-1.7.5-7.3.1.armv7hl.rpm libharfbuzz-gobject0-1.7.5-7.3.1.armv7hl.rpm libharfbuzz-gobject0-debuginfo-1.7.5-7.3.1.armv7hl.rpm libharfbuzz-icu0-1.7.5-7.3.1.armv7hl.rpm libharfbuzz-icu0-debuginfo-1.7.5-7.3.1.armv7hl.rpm libharfbuzz0-1.7.5-7.3.1.armv7hl.rpm libharfbuzz0-debuginfo-1.7.5-7.3.1.armv7hl.rpm typelib-1_0-HarfBuzz-0_0-1.7.5-7.3.1.armv7hl.rpm