[ASA-202001-5] chromium: multiple issues

🗓️ 17 Jan 2020 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 26 Views

Critical chromium issues and updates to version 79.0.3945.130-

Reporter	Title	Published	Views	Family All 86
BDU FSTEC	The vulnerability of Google Chrome browser, related to its use after release, allows a violator to gain access to confidential data, compromise the integrity of those data, and cause service interruptions.	14 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.	14 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain access to confidential information, compromise its integrity, and cause service failures.	14 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SpeechRecognizerImpl::Abort function in Google Chrome web browser allows a hacker to trigger a service failure.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Speech Recognizer component in the Google Chrome web browser, which allows a hacker to trigger a service denial.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Google Chrome’s web browser extensions, which allows a hacker to bypass existing security restrictions	2 Mar 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : chromium-browser (RHSA-2020:0214)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DSA-4606-1 : chromium - security update	21 Jan 202000:00	–	nessus
Tenable Nessus	Fedora 30 : chromium (2020-39e0b8bd14)	30 Mar 202000:00	–	nessus
Tenable Nessus	Fedora 31 : chromium (2020-9382ceb2f8)	31 Jan 202000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	chromium	79.0.3945.130-1	chromium-79.0.3945.130-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-1088
chromereleases	www.chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html
crbug	www.crbug.com/1018677
crbug	www.crbug.com/1033407
crbug	www.crbug.com/1032170
security	www.security.archlinux.org/CVE-2020-6378
security	www.security.archlinux.org/CVE-2020-6379
security	www.security.archlinux.org/CVE-2020-6380

17 Jan 2020 00:00Current

1.2Low risk

Vulners AI Score1.2

CVSS 26.8

CVSS 3.18.8

EPSS0.00654

arbitrary code execution insufficient validation remote attacker chromium browser cve-2020-6378 cve-2020-6379 cve-2020-6380