{"id":"openSUSE-SU-2026:22118-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 155.0.8059.79 (boo#1285401):\n  * CVE-2026-110152: Buffer overflow in ANGLE\n  * CVE-2026-110149: Use after free in Browser\n  * CVE-2026-110136: Use after free in PDF\n  * CVE-2026-110161: Use after free in Network\n  * CVE-2026-110165: Use after free in Core\n  * CVE-2026-110148: Use after free in SVG\n  * CVE-2026-110151: Use after free in Media\n  * CVE-2026-110162: Use after free in Desktop\n  * CVE-2026-110170: Use after free in Bindings\n  * CVE-2026-110160: Missing authorization in ReadingMode\n  * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk\n  * CVE-2026-110146: Information leak in Passwords\n  * CVE-2026-110150: Privilege elevation in Installer\n  * CVE-2026-110156: Incorrect reference resolution in Extensions\n  * CVE-2026-110137: Use after free in WebRTC\n  * CVE-2026-110140: Type confusion in V8\n  * CVE-2026-110158: Use after free in Passwords\n  * CVE-2026-110145: Use after free in Passwords\n  * CVE-2026-110159: Incorrect authorization in Updater\n  * CVE-2026-110144: Incorrect authorization in Mojo\n  * CVE-2026-110153: Use after free in Media\n  * CVE-2026-110166: Buffer overflow in Animation\n  * CVE-2026-110169: Use after free in V8\n  * CVE-2026-110168: Use after free in V8\n  * CVE-2026-110139: Use after free in Media\n  * CVE-2026-110172: Use after free in Media\n  * CVE-2026-110164: Use after free in DOM\n  * CVE-2026-110163: Use after free in DOM\n  * CVE-2026-110141: Observable discrepancy in Media\n  * CVE-2026-110138: Use after free in ShapeDetection\n  * CVE-2026-110157: Use after free in SVG\n  * CVE-2026-110147: Use after free in PDF\n  * CVE-2026-110154: Use after free in Canvas\n  * CVE-2026-110155: Buffer overflow in PDFium\n  * CVE-2026-110167: Use after free in Media\n  * CVE-2026-110171: Use after free in Media\n  * CVE-2026-110142: Use after free in FileSystem\n","modified":"2026-10-19T17:23:15.945604150Z","published":"2026-10-16T17:03:44Z","related":["CVE-2026-110136","CVE-2026-110137","CVE-2026-110138","CVE-2026-110139","CVE-2026-110140","CVE-2026-110141","CVE-2026-110142","CVE-2026-110143","CVE-2026-110144","CVE-2026-110145","CVE-2026-110146","CVE-2026-110147","CVE-2026-110148","CVE-2026-110149","CVE-2026-110150","CVE-2026-110151","CVE-2026-110152","CVE-2026-110153","CVE-2026-110154","CVE-2026-110155","CVE-2026-110156","CVE-2026-110157","CVE-2026-110158","CVE-2026-110159","CVE-2026-110160","CVE-2026-110161","CVE-2026-110162","CVE-2026-110163","CVE-2026-110164","CVE-2026-110165","CVE-2026-110166","CVE-2026-110167","CVE-2026-110168","CVE-2026-110169","CVE-2026-110170","CVE-2026-110171","CVE-2026-110172"],"upstream":["CVE-2026-110136","CVE-2026-110137","CVE-2026-110138","CVE-2026-110139","CVE-2026-110140","CVE-2026-110141","CVE-2026-110142","CVE-2026-110143","CVE-2026-110144","CVE-2026-110145","CVE-2026-110146","CVE-2026-110147","CVE-2026-110148","CVE-2026-110149","CVE-2026-110150","CVE-2026-110151","CVE-2026-110152","CVE-2026-110153","CVE-2026-110154","CVE-2026-110155","CVE-2026-110156","CVE-2026-110157","CVE-2026-110158","CVE-2026-110159","CVE-2026-110160","CVE-2026-110161","CVE-2026-110162","CVE-2026-110163","CVE-2026-110164","CVE-2026-110165","CVE-2026-110166","CVE-2026-110167","CVE-2026-110168","CVE-2026-110169","CVE-2026-110170","CVE-2026-110171","CVE-2026-110172"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285401"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110136"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110137"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110138"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110139"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110140"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110141"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110142"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110143"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110144"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110145"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110146"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110147"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110148"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110149"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110150"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110151"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110152"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110153"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110154"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110155"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110156"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110157"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110158"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110159"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110160"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110161"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110162"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110163"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110164"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110165"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110166"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110167"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110168"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110169"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110170"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110171"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-110172"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0.8059.79-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromium":"155.0.8059.79-bp160.1.1","chromedriver":"155.0.8059.79-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22118-1.json"}}],"schema_version":"1.9.0"}