Detections
Analytics
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20332-1)
critical Nessus Plugin ID 301476
Language:
Synopsis
The remote openSUSE host is missing one or more security updates.Description
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20332-1 advisory.Changes in chromium:
- Chromium 145.0.7632.159 (boo#1259213)
* CVE-2026-3536: Integer overflow in ANGLE
* CVE-2026-3537: Object lifecycle issue in PowerVR
* CVE-2026-3538: Integer overflow in Skia
* CVE-2026-3539: Object lifecycle issue in DevTools
* CVE-2026-3540: Inappropriate implementation in WebAudio
* CVE-2026-3541: Inappropriate implementation in CSS
* CVE-2026-3542: Inappropriate implementation in WebAssembly
* CVE-2026-3543: Inappropriate implementation in V8
* CVE-2026-3544: Heap buffer overflow in WebCodecs
* CVE-2026-3545: Insufficient data validation in Navigation
- Chromium 145.0.7632.116 (boo#1258733):
* CVE-2026-3061: Out of bounds read in Media
* CVE-2026-3062: Out of bounds read and write in Tint
* CVE-2026-3063: Inappropriate implementation in DevTools
- Chromium 145.0.7632.109 (boo#1258438):
* CVE-2026-2648: Heap buffer overflow in PDFium
* CVE-2026-2649: Integer overflow in V8
* CVE-2026-2650: Heap buffer overflow in Media
- more fixes for desktop file, some variables were lowercased, further adaptions in INSTALL script (boo#1258199)
- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
- drop use of rollup binaries and use rollup-3.x which does not use prebuilt binaries (that fail at least on older ppc64le) follow the approach of the debian packaging
- update/resync ppc64le patches from fedora
- fix INSTALL.sh again to replace the tags in desktop file, appdata and manpage (boo#1258199)
- Chromium 145.0.7632.75:
* CVE-2026-2441: Use after free in CSS (boo#1258185)
- Chromium 145.0.7632.67:
* Revert a change in url_fixer that may have caused crashes
- Chromium 145.0.7632.45 (boo#1258116)
* jpeg-xl support has been readded
* CVE-2026-2313: Use after free in CSS
* CVE-2026-2314: Heap buffer overflow in Codecs
* CVE-2026-2315: Inappropriate implementation in WebGPU
* CVE-2026-2316: Insufficient policy enforcement in Frames
* CVE-2026-2317: Inappropriate implementation in Animation
* CVE-2026-2318: Inappropriate implementation in PictureInPicture
* CVE-2026-2319: Race in DevTools
* CVE-2026-2320: Inappropriate implementation in File input
* CVE-2026-2321: Use after free in Ozone
* CVE-2026-2322: Inappropriate implementation in File input
* CVE-2026-2323: Inappropriate implementation in Downloads
Tenable has extracted the preceding description block directly from the SUSE security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected chromedriver and / or chromium packages.See Also
https://bugzilla.suse.com/1258116
https://bugzilla.suse.com/1258185
https://bugzilla.suse.com/1258199
https://bugzilla.suse.com/1258438
https://bugzilla.suse.com/1258733
https://bugzilla.suse.com/1259213
https://www.suse.com/security/cve/CVE-2026-2313
https://www.suse.com/security/cve/CVE-2026-2314
https://www.suse.com/security/cve/CVE-2026-2315
https://www.suse.com/security/cve/CVE-2026-2316
https://www.suse.com/security/cve/CVE-2026-2317
https://www.suse.com/security/cve/CVE-2026-2318
https://www.suse.com/security/cve/CVE-2026-2319
https://www.suse.com/security/cve/CVE-2026-2320
https://www.suse.com/security/cve/CVE-2026-2321
https://www.suse.com/security/cve/CVE-2026-2322
https://www.suse.com/security/cve/CVE-2026-2323
https://www.suse.com/security/cve/CVE-2026-2441
https://www.suse.com/security/cve/CVE-2026-2648
https://www.suse.com/security/cve/CVE-2026-2649
https://www.suse.com/security/cve/CVE-2026-2650
https://www.suse.com/security/cve/CVE-2026-3061
https://www.suse.com/security/cve/CVE-2026-3062
https://www.suse.com/security/cve/CVE-2026-3063
https://www.suse.com/security/cve/CVE-2026-3536
https://www.suse.com/security/cve/CVE-2026-3537
https://www.suse.com/security/cve/CVE-2026-3538
https://www.suse.com/security/cve/CVE-2026-3539
https://www.suse.com/security/cve/CVE-2026-3540
https://www.suse.com/security/cve/CVE-2026-3541
https://www.suse.com/security/cve/CVE-2026-3542
https://www.suse.com/security/cve/CVE-2026-3543
Plugin Details
Severity: Critical
ID: 301476
File Name: openSUSE-2026-20332-1.nasl
Version: 1.2
Type: Local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/8/2026
Updated: 9/3/2026
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.4
Percentile: 99.82
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-3538
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS Score Source: CVE-2026-3062
Vulnerability Information
CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:chromedriver, p-cpe:/a:novell:opensuse:chromium
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/7/2026
Vulnerability Publication Date: 3/3/2026
Reference Information
CVE: CVE-2026-2313, CVE-2026-2314, CVE-2026-2315, CVE-2026-2316, CVE-2026-2317, CVE-2026-2318, CVE-2026-2319, CVE-2026-2320, CVE-2026-2321, CVE-2026-2322, CVE-2026-2323, CVE-2026-2441, CVE-2026-2648, CVE-2026-2649, CVE-2026-2650, CVE-2026-3061, CVE-2026-3062, CVE-2026-3063, CVE-2026-3536, CVE-2026-3537, CVE-2026-3538, CVE-2026-3539, CVE-2026-3540, CVE-2026-3541, CVE-2026-3542, CVE-2026-3543, CVE-2026-3544, CVE-2026-3545