Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2020-0123 Critical: Chromium Crash and Code Execution Issues

mageia
Calendar Grey March 6, 2020
Dist Mageia Esm H88
Recent security updates for the chromium-browser-stable packages in Mageia address numerous severe vulnerabilities that may lead to system crashes or unauthorized code execution.
Chromium-browser 80.0.3987.122 fixes security issues: Multiple flaws were found in the way Chromium 79.0.3945.130 processes various types of web content, where loading a web page ...

Summary

Chromium-browser 80.0.3987.122 fixes security issues:
Multiple flaws were found in the way Chromium 79.0.3945.130 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2020-6381, CVE-2020-6382, CVE-2020-6383, CVE-2020-6384, CVE-2020-6385, CVE-2020-6386, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390, CVE-2020-6391, CVE-2020-6392, CVE-2020-6393, CVE-2020-6394, CVE-2020-6395, CVE-2020-6396, CVE-2020-6397, CVE-2020-6398, CVE-2020-6399, CVE-2020-6400, CVE-2020-6401, CVE-2020-6402, CVE-2020-6403, CVE-2020-6404, CVE-2020-6405, CVE-2020-6406, CVE-2020-6407, CVE-2020-6408, CVE-2020-6409, CVE-2020-6410, CVE-2020-6411, CVE-2020-6412, CVE-2020-6413, CVE-2020-6414, CVE-2020-6415, CVE-2020-6416, CVE-2020-6418, CVE-2019-18197, CVE-2019-19923, CVE-2019-19925, CVE-2019-19926)
Upstream chromium 80.0.3987.122 also includes a fix for an integer overflow iss...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=26269

- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html

- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_11.html

- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_13.html

- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html

- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html

- https://unicode-org.atlassian.net/browse/ICU-20958

- https://www.cve.org/CVERecord?id=CVE-2019-19923

- https://www.cve.org/CVERecord?id=CVE-2019-19925

- https://www.cve.org/CVERecord?id=CVE-2019-19926

- https://www.cve.org/CVERecord?id=CVE-2020-6381

- https://www.cve.org/CVERecord?id=CVE-2020-6382

- https://www.cve.org/CVERecord?id=CVE-2020-6383

- https://www.cve.org/CVERecord?id=CVE-2020-6384

- https://www.cve.org/CVERecord?id=CVE-2020-6385

- https://www.cve.org/CVERecord?id=CVE-2020-6386

- https://www.cve.org/CVERecord?id=CVE-2020-6387

- https://www.cve.org/CVERecord?id=CVE-2020-6388

- https://www.cve.org/CVERecord?id=CVE-2020-6389

- https://www.cve.org/CVERecord?id=CVE-2020-6390

- https://www.cve.org/CVERecord?id=CVE-2020-6391

- https://www.cve.org/CVERecord?id=CVE-2020-6392

- https://www.cve.org/CVERecord?id=CVE-2020-6393

- https://www.cve.org/CVERecord?id=CVE-2020-6394

- https://www.cve.org/CVERecord?id=CVE-2020-6395

- https://www.cve.org/CVERecord?id=CVE-2020-6396

- https://www.cve.org/CVERecord?id=CVE-2020-6397

- https://www.cve.org/CVERecord?id=CVE-2020-6398

- https://www.cve.org/CVERecord?id=CVE-2020-6399

- https://www.cve.org/CVERecord?id=CVE-2020-6400

- https://www.cve.org/CVERecord?id=CVE-2020-6401

- https://www.cve.org/CVERecord?id=CVE-2020-6402

- https://www.cve.org/CVERecord?id=CVE-2020-6403

- https://www.cve.org/CVERecord?id=CVE-2020-6404

- https://www.cve.org/CVERecord?id=CVE-2020-6405

- https://www.cve.org/CVERecord?id=CVE-2020-6406

- https://www.cve.org/CVERecord?id=CVE-2020-6407

- https://www.cve.org/CVERecord?id=CVE-2020-6408

- https://www.cve.org/CVERecord?id=CVE-2020-6409

- https://www.cve.org/CVERecord?id=CVE-2020-6410

- https://www.cve.org/CVERecord?id=CVE-2020-6411

- https://www.cve.org/CVERecord?id=CVE-2020-6412

- https://www.cve.org/CVERecord?id=CVE-2020-6413

- https://www.cve.org/CVERecord?id=CVE-2020-6414

- https://www.cve.org/CVERecord?id=CVE-2020-6415

- https://www.cve.org/CVERecord?id=CVE-2020-6416

- https://www.cve.org/CVERecord?id=CVE-2020-6418

- https://www.cve.org/CVERecord?id=CVE-2019-1819

Resolution

SRPMS

- 7/core/chromium-browser-stable-80.0.3987.122-1.mga7

- 7/core/icu-63.1-1.2.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0123.html
Type: security
CVE: CVE-2019-19923, CVE-2019-19925, CVE-2019-19926, CVE-2020-6381, CVE-2020-6382, CVE-2020-6383, CVE-2020-6384, CVE-2020-6385, CVE-2020-6386, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390, CVE-2020-6391, CVE-2020-6392, CVE-2020-6393, CVE-2020-6394, CVE-2020-6395, CVE-2020-6396, CVE-2020-6397, CVE-2020-6398, CVE-2020-6399, CVE-2020-6400, CVE-2020-6401, CVE-2020-6402, CVE-2020-6403, CVE-2020-6404, CVE-2020-6405, CVE-2020-6406, CVE-2020-6407, CVE-2020-6408, CVE-2020-6409, CVE-2020-6410, CVE-2020-6411, CVE-2020-6412, CVE-2020-6413, CVE-2020-6414, CVE-2020-6415, CVE-2020-6416, CVE-2020-6418, CVE-2019-1819

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here