Lucene search

K
debianDebianDEBIAN:DSA-5546-1:29B1F
HistoryNov 03, 2023 - 3:57 p.m.

[SECURITY] [DSA 5546-1] chromium security update

2023-11-0315:57:32
lists.debian.org
7
debian
denial of service
chromium
information disclosure
security update
arbitrary code

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.1%


Debian Security Advisory DSA-5546-1 [email protected]
https://www.debian.org/security/ Andres Salomon
November 02, 2023 https://www.debian.org/security/faq


Package : chromium
CVE ID : CVE-2023-5480 CVE-2023-5482 CVE-2023-5849 CVE-2023-5850
CVE-2023-5851 CVE-2023-5852 CVE-2023-5853 CVE-2023-5854
CVE-2023-5855 CVE-2023-5856 CVE-2023-5857 CVE-2023-5858
CVE-2023-5859

Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.

For the oldstable distribution (bullseye), these problems have been fixed
in version 119.0.6045.105-1~deb11u1.

For the stable distribution (bookworm), these problems have been fixed in
version 119.0.6045.105-1~deb12u1.

We recommend that you upgrade your chromium packages.

For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.1%