Upstream information

CVE-2019-5786 at MITRE

Description

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 1127602 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 12 SP2
  • chromedriver >= 72.0.3626.121-92.1
  • chromium >= 72.0.3626.121-92.1
 Patchnames:
openSUSE-2019-298
SUSE Package Hub 15
  • chromedriver >= 72.0.3626.121-bp150.2.37.1
  • chromium >= 72.0.3626.121-bp150.2.37.1
 Patchnames:
openSUSE-2019-298
openSUSE Leap 15.0
  • chromedriver >= 72.0.3626.121-lp150.2.46.1
  • chromium >= 72.0.3626.121-lp150.2.46.1
 Patchnames:
openSUSE-2019-298
openSUSE Leap 15.2
  • chromium >= 83.0.4103.97-lp152.1.1
  • libqt5-qtwebengine >= 5.12.7-lp152.2.9
 Patchnames:
openSUSE Leap 15.2 GA chromium-83.0.4103.97-lp152.1.1
openSUSE Leap 15.2 GA libqt5-qtwebengine-5.12.7-lp152.2.3
openSUSE Leap 15.3
  • chromium >= 90.0.4430.212-bp153.1.1
  • libqt5-qtwebengine >= 5.15.3-bp153.1.1
 Patchnames:
openSUSE Leap 15.3 GA chromium-90.0.4430.212-bp153.1.1
openSUSE Leap 15.3 GA libqt5-qtwebengine-5.15.3-bp153.1.1
openSUSE Leap 15.4
  • chromium >= 101.0.4951.64-bp154.1.2
  • libqt5-qtwebengine >= 5.15.9-bp154.1.32
 Patchnames:
openSUSE Leap 15.4 GA chromium-101.0.4951.64-bp154.1.2
openSUSE Leap 15.4 GA libqt5-qtwebengine-5.15.9-bp154.1.32
openSUSE Tumbleweed
  • chromedriver >= 93.0.4577.82-1.1
  • chromium >= 93.0.4577.82-1.1
  • libQt5Pdf5 >= 5.15.6-2.1
  • libQt5PdfWidgets5 >= 5.15.6-2.1
  • libqt5-qtpdf-devel >= 5.15.6-2.1
  • libqt5-qtpdf-examples >= 5.15.6-2.1
  • libqt5-qtpdf-imports >= 5.15.6-2.1
  • libqt5-qtpdf-private-headers-devel >= 5.15.6-2.1
  • libqt5-qtwebengine >= 5.15.6-2.1
  • libqt5-qtwebengine-devel >= 5.15.6-2.1
  • libqt5-qtwebengine-examples >= 5.15.6-2.1
  • libqt5-qtwebengine-private-headers-devel >= 5.15.6-2.1
  • ungoogled-chromium >= 113.0.5672.92-1.1
  • ungoogled-chromium-chromedriver >= 113.0.5672.92-1.1
 Patchnames:
openSUSE Tumbleweed GA chromedriver-93.0.4577.82-1.1
openSUSE Tumbleweed GA libQt5Pdf5-5.15.6-2.1
openSUSE Tumbleweed GA ungoogled-chromium-113.0.5672.92-1.1

SUSE Timeline for this CVE

CVE page created: Sat Mar 2 14:11:28 2019
CVE page last modified: Tue May 23 15:11:30 2023