[arch-security] [ASA-201603-24] chromium: multiple issues
rgacogne at archlinux.org
Sat Mar 26 14:53:34 UTC 2016
Arch Linux Security Advisory ASA-201603-24
Date : 2016-03-26
CVE-ID : CVE-2016-1646 CVE-2016-1647 CVE-2016-1648 CVE-2016-1649
Package : chromium
Type : multiple issues
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE
The package chromium before version 49.0.2623.108-1 is vulnerable to
Upgrade to 49.0.2623.108-1.
# pacman -Syu "chromium>=49.0.2623.108-1"
The problem has been fixed upstream in version 49.0.2623.108.
Out-of-bounds read in V8. Credit to Wen Xu from Tencent KeenLab.
Use-after-free in Navigation. Credit to anonymous.
Use-after-free in Extensions. Credit to anonymous.
Buffer overflow in libANGLE. Credit to lokihardt working with HP's Zero
Day Initiative / Pwn2Own.
Various fixes from internal audits, fuzzing and other initiatives.
A remote attacker can cause a denial of service or have another
unspecified impact on the affected host.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 801 bytes
Desc: OpenPGP digital signature
More information about the arch-security