Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7: MGASA-2020-0078 Critical: Chromium Code Execution Risks

mageia
Calendar Grey February 9, 2020
Dist Mageia Esm H88
Mageia 2021-0025 upgrades firefox-browser-stable to address critical vulnerabilities, improving defenses against earlier risks.
Multiple flaws were found in the way Chromium 78.0.3904.108 processes various types of web content, where loading a web page containing malicious content could cause Chromium to cr...

Summary

Multiple flaws were found in the way Chromium 78.0.3904.108 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-13725, CVE-2019-13726, CVE-2019-13727, CVE-2019-13728, CVE-2019-13729, CVE-2019-13730, CVE-2019-13732, CVE-2019-13734, CVE-2019-13735, CVE-2019-13736, CVE-2019-13737, CVE-2019-13738, CVE-2019-13739, CVE-2019-13740, CVE-2019-13741, CVE-2019-13742, CVE-2019-13743, CVE-2019-13744, CVE-2019-13745, CVE-2019-13746, CVE-2019-13747, CVE-2019-13748, CVE-2019-13749, CVE-2019-13750, CVE-2019-13751, CVE-2019-13752, CVE-2019-13753, CVE-2019-13754, CVE-2019-13755, CVE-2019-13756, CVE-2019-13757, CVE-2019-13758, CVE-2019-13759, CVE-2019-13761, CVE-2019-13762, CVE-2019-13763, CVE-2019-13764, CVE-2019-13767, CVE-2020-6377, CVE-2020-6378, CVE-2020-6379, CVE-2020-6380)

References

- https://bugs.mageia.org/show_bug.cgi?id=26103

- https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html

- https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop_17.html

- https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop.html

- https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html

- https://www.cve.org/CVERecord?id=CVE-2019-13725

- https://www.cve.org/CVERecord?id=CVE-2019-13726

- https://www.cve.org/CVERecord?id=CVE-2019-13727

- https://www.cve.org/CVERecord?id=CVE-2019-13728

- https://www.cve.org/CVERecord?id=CVE-2019-13729

- https://www.cve.org/CVERecord?id=CVE-2019-13730

- https://www.cve.org/CVERecord?id=CVE-2019-13732

- https://www.cve.org/CVERecord?id=CVE-2019-13734

- https://www.cve.org/CVERecord?id=CVE-2019-13735

- https://www.cve.org/CVERecord?id=CVE-2019-13736

- https://www.cve.org/CVERecord?id=CVE-2019-13737

- https://www.cve.org/CVERecord?id=CVE-2019-13738

- https://www.cve.org/CVERecord?id=CVE-2019-13739

- https://www.cve.org/CVERecord?id=CVE-2019-13740

- https://www.cve.org/CVERecord?id=CVE-2019-13741

- https://www.cve.org/CVERecord?id=CVE-2019-13742

- https://www.cve.org/CVERecord?id=CVE-2019-13743

- https://www.cve.org/CVERecord?id=CVE-2019-13744

- https://www.cve.org/CVERecord?id=CVE-2019-13745

- https://www.cve.org/CVERecord?id=CVE-2019-13746

- https://www.cve.org/CVERecord?id=CVE-2019-13747

- https://www.cve.org/CVERecord?id=CVE-2019-13748

- https://www.cve.org/CVERecord?id=CVE-2019-13749

- https://www.cve.org/CVERecord?id=CVE-2019-13750

- https://www.cve.org/CVERecord?id=CVE-2019-13751

- https://www.cve.org/CVERecord?id=CVE-2019-13752

- https://www.cve.org/CVERecord?id=CVE-2019-13753

- https://www.cve.org/CVERecord?id=CVE-2019-13754

- https://www.cve.org/CVERecord?id=CVE-2019-13755

- https://www.cve.org/CVERecord?id=CVE-2019-13756

- https://www.cve.org/CVERecord?id=CVE-2019-13757

- https://www.cve.org/CVERecord?id=CVE-2019-13758

- https://www.cve.org/CVERecord?id=CVE-2019-13759

- https://www.cve.org/CVERecord?id=CVE-2019-13761

- https://www.cve.org/CVERecord?id=CVE-2019-13762

- https://www.cve.org/CVERecord?id=CVE-2019-13763

- https://www.cve.org/CVERecord?id=CVE-2019-13764

- https://www.cve.org/CVERecord?id=CVE-2019-13767

- https://www.cve.org/CVERecord?id=CVE-2020-6377

- https://www.cve.org/CVERecord?id=CVE-2020-6378

- https://www.cve.org/CVERecord?id=CVE-2020-6379

- https://www.cve.org/CVERecord?id=CVE-2020-6380

Topics%20covered

Topics Covered

security advisory DoS arbitrary code sensitive information web content chromium Mageia

Resolution

SRPMS

- 7/core/chromium-browser-stable-79.0.3945.130-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 09 Feb 2020
URL: https://advisories.mageia.org/MGASA-2020-0078.html
Type: security
CVE: CVE-2019-13725, CVE-2019-13726, CVE-2019-13727, CVE-2019-13728, CVE-2019-13729, CVE-2019-13730, CVE-2019-13732, CVE-2019-13734, CVE-2019-13735, CVE-2019-13736, CVE-2019-13737, CVE-2019-13738, CVE-2019-13739, CVE-2019-13740, CVE-2019-13741, CVE-2019-13742, CVE-2019-13743, CVE-2019-13744, CVE-2019-13745, CVE-2019-13746, CVE-2019-13747, CVE-2019-13748, CVE-2019-13749, CVE-2019-13750, CVE-2019-13751, CVE-2019-13752, CVE-2019-13753, CVE-2019-13754, CVE-2019-13755, CVE-2019-13756, CVE-2019-13757, CVE-2019-13758, CVE-2019-13759, CVE-2019-13761, CVE-2019-13762, CVE-2019-13763, CVE-2019-13764, CVE-2019-13767, CVE-2020-6377, CVE-2020-6378, CVE-2020-6379, CVE-2020-6380

Topics%20covered

Topics Covered

security advisory DoS arbitrary code sensitive information web content chromium Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here