Bug 1181827 (CVE-2021-21148) - VUL-0: CVE-2021-21148: chromium: Update to 88.0.4324.150
Summary: VUL-0: CVE-2021-21148: chromium: Update to 88.0.4324.150
Status: RESOLVED FIXED
Alias: CVE-2021-21148
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 15.2
Hardware: Other Other
: P2 - High : Critical (vote)
Target Milestone: Leap 15.2
Assignee: Callum Farmer
QA Contact: E-mail List
URL:
Whiteboard: CVSSv3.1:SUSE:CVE-2021-21148:8.8:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2021-02-05 08:13 UTC by Alexandros Toptsoglou
Modified: 2024-07-11 13:38 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexandros Toptsoglou 2021-02-05 08:13:46 UTC 
CVE-2021-21148: Heap buffer overflow in V8. Reported by Mattias Buelens on 2021-01-24

Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild.
Comment 2 Callum Farmer 2021-02-05 08:49:02 UTC 
Ok
Comment 3 OBSbugzilla Bot 2021-02-06 14:40:11 UTC 
This is an autogenerated message for OBS integration:
This bug (1181827) was mentioned in
https://build.opensuse.org/request/show/869976 15.2 / chromium
https://build.opensuse.org/request/show/869982 Factory / chromium
https://build.opensuse.org/request/show/869983 Backports:SLE-15-SP3 / chromium
Comment 4 Swamp Workflow Management 2021-02-09 23:16:50 UTC 
openSUSE-SU-2021:0267-1: An update that fixes one vulnerability is now available.

Category: security (important)
Bug References: 1181827
CVE References: CVE-2021-21148
JIRA References: 
Sources used:
openSUSE Leap 15.2 (src):    chromium-88.0.4324.150-lp152.2.72.1
Comment 5 Swamp Workflow Management 2021-02-11 20:30:47 UTC 
openSUSE-SU-2021:0276-1: An update that fixes one vulnerability is now available.

Category: security (important)
Bug References: 1181827
CVE References: CVE-2021-21148
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP2 (src):    chromium-88.0.4324.150-bp152.2.59.1
Comment 6 Callum Farmer 2021-02-13 16:07:41 UTC 
done
Comment 7 Swamp Workflow Management 2021-02-15 17:15:19 UTC 
openSUSE-SU-2021:0296-1: An update that fixes one vulnerability is now available.

Category: security (important)
Bug References: 1181827
CVE References: CVE-2021-21148
JIRA References: 
Sources used:
openSUSE Leap 15.2:NonFree (src):    opera-74.0.3911.107-lp152.2.34.1
Comment 8 OBSbugzilla Bot 2021-12-15 09:41:13 UTC 
This is an autogenerated message for OBS integration:
This bug (1181827) was mentioned in
https://build.opensuse.org/request/show/940663 Backports:SLE-12-SP3 / chromium