[manjaro-security] [ASA-202002-11] chromium: multiple issues
foxboron at archlinux.org
Sat Feb 29 14:27:23 CET 2020
Arch Linux Security Advisory ASA-202002-11
Date : 2020-02-25
CVE-ID : CVE-2020-6407 CVE-2020-6418
Package : chromium
Type : multiple issues
Remote : Yes
Link : https://security.archlinux.org/AVG-1102
The package chromium before version 80.0.3987.122-1 is vulnerable to
multiple issues including arbitrary code execution and information
Upgrade to 80.0.3987.122-1.
# pacman -Syu "chromium>=80.0.3987.122-1"
The problems have been fixed upstream in version 80.0.3987.122.
- CVE-2020-6407 (information disclosure)
An out-of-bounds memory access vulnerability has been found in the
streams component of chromium before 80.0.3987.122.
- CVE-2020-6418 (arbitrary code execution)
A type confusion vulnerability has been found in the V8 component of
chromium before 80.0.3987.122.
A remote attacker can access sensitive information or execute arbitrary
code on the affected host.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the manjaro-security