Security update for chromium (important)

An update that fixes 10 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

Chromium 104.0.5112.101 (boo#1202509):

• CVE-2022-2852: Use after free in FedCM
• CVE-2022-2854: Use after free in SwiftShader
• CVE-2022-2855: Use after free in ANGLE
• CVE-2022-2857: Use after free in Blink
• CVE-2022-2858: Use after free in Sign-In Flow
• CVE-2022-2853: Heap buffer overflow in Downloads
• CVE-2022-2856: Insufficient validation of untrusted input in Intents
• CVE-2022-2859: Use after free in Chrome OS Shell
• CVE-2022-2860: Insufficient policy enforcement in Cookies
• CVE-2022-2861: Inappropriate implementation in Extensions API

• Re-enable our version of chrome-wrapper
• Set no sandbox if root is being used (https://crbug.com/638180)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Backports SLE-15-SP4:

  zypper in -t patch openSUSE-2022-10099=1

• openSUSE Backports SLE-15-SP3:

  zypper in -t patch openSUSE-2022-10099=1