Upstream information

CVE-2018-6051 at MITRE

Description

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 1077571 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub for SUSE Linux Enterprise 12
  • libre2-0 >= 20180101-5.1
  • libre2-0-debuginfo >= 20180101-5.1
  • re2 >= 20180101-5.1
  • re2-debugsource >= 20180101-5.1
  • re2-devel >= 20180101-5.1
Patchnames:
openSUSE-2018-106
SUSE Package Hub for SUSE Linux Enterprise 12 SP2
  • chromedriver >= 64.0.3282.119-46.2
  • chromium >= 64.0.3282.119-46.2
  • libre2-0 >= 20180101-5.1
  • libre2-0-debuginfo >= 20180101-5.1
  • re2 >= 20180101-5.1
  • re2-debugsource >= 20180101-5.1
  • re2-devel >= 20180101-5.1
Patchnames:
openSUSE-2018-106
openSUSE Leap 15.0
  • chromium >= 66.0.3359.170-lp150.1.1
Patchnames:
openSUSE Leap 15.0 GA chromium
openSUSE Leap 42.3
  • chromedriver >= 64.0.3282.119-135.1
  • chromedriver-debuginfo >= 64.0.3282.119-135.1
  • chromium >= 64.0.3282.119-135.1
  • chromium-debuginfo >= 64.0.3282.119-135.1
  • chromium-debugsource >= 64.0.3282.119-135.1
  • libre2-0 >= 20180101-9.1
  • libre2-0-32bit >= 20180101-9.1
  • libre2-0-debuginfo >= 20180101-9.1
  • libre2-0-debuginfo-32bit >= 20180101-9.1
  • re2 >= 20180101-9.1
  • re2-debugsource >= 20180101-9.1
  • re2-devel >= 20180101-9.1
Patchnames:
openSUSE-2018-103