[ASA-201908-6] chromium: arbitrary code execution
rgacogne at archlinux.org
Mon Aug 12 16:05:32 UTC 2019
Arch Linux Security Advisory ASA-201908-6
Date : 2019-08-10
CVE-ID : CVE-2019-5867 CVE-2019-5868
Package : chromium
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-1018
The package chromium before version 76.0.3809.100-1 is vulnerable to
arbitrary code execution.
Upgrade to 76.0.3809.100-1.
# pacman -Syu "chromium>=76.0.3809.100-1"
The problems have been fixed upstream in version 76.0.3809.100.
- CVE-2019-5867 (arbitrary code execution)
An out-of-bounds read has been found in the V8 component of the
chromium browser before 76.0.3809.100.
- CVE-2019-5868 (arbitrary code execution)
A use-after-free issue has been found in PDFium's ExecuteFieldAction,
in the chromium browser before 76.0.3809.100.
A remote attacker can execute arbitrary code on the affected host.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the arch-security