Security update for Chromium (critical)

An update that fixes 25 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

• Chromium was updated to 90.0.4430.93
  (boo#1184764,boo#1185047,boo#1185398)
  • CVE-2021-21227: Insufficient data validation in V8.
  • CVE-2021-21232: Use after free in Dev Tools.
  • CVE-2021-21233: Heap buffer overflow in ANGLE.
  • CVE-2021-21228: Insufficient policy enforcement in extensions.
  • CVE-2021-21229: Incorrect security UI in downloads.
  • CVE-2021-21230: Type Confusion in V8.
  • CVE-2021-21231: Insufficient data validation in V8.
  • CVE-2021-21222: Heap buffer overflow in V8
  • CVE-2021-21223: Integer overflow in Mojo
  • CVE-2021-21224: Type Confusion in V8
  • CVE-2021-21225: Out of bounds memory access in V8
  • CVE-2021-21226: Use after free in navigation
  • CVE-2021-21201: Use after free in permissions
  • CVE-2021-21202: Use after free in extensions
  • CVE-2021-21203: Use after free in Blink
  • CVE-2021-21204: Use after free in Blink
  • CVE-2021-21205: Insufficient policy enforcement in navigation
  • CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  • CVE-2021-21207: Use after free in IndexedDB
  • CVE-2021-21208: Insufficient data validation in QR scanner
  • CVE-2021-21209: Inappropriate implementation in storage
  • CVE-2021-21210: Inappropriate implementation in Network
  • CVE-2021-21211: Inappropriate implementation in Navigatio
  • CVE-2021-21212: Incorrect security UI in Network Config UI
  • CVE-2021-21213: Use after free in WebMIDI

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-629=1