ArchLinux: 202004-9: chromium: multiple issues
Summary
- CVE-2020-6423 (arbitrary code execution)
A use after free security issue has been found in the audio component
of the chromium browser before 81.0.4044.92.
- CVE-2020-6430 (arbitrary code execution)
A type confusion security issue has been found in the V8 component of
the chromium browser before 81.0.4044.92.
- CVE-2020-6431 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
full screen component of the chromium browser before 81.0.4044.92.
- CVE-2020-6432 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
navigations component of the chromium browser before 81.0.4044.92.
- CVE-2020-6433 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
extensions component of the chromium browser before 81.0.4044.92.
- CVE-2020-6434 (arbitrary code execution)
A use-after-free security issue has been found in the devtools
component of the chromium browser before 81.0.4044.92.
- CVE-2020-6435 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
extensions component of the chromium browser before 81.0.4044.92.
- CVE-2020-6436 (arbitrary code execution)
A use-after-free security issue has been found in the window management
component of the chromium browser before 81.0.4044.92.
- CVE-2020-6437 (access restriction bypass)
An inappropriate implementation security issue has been found in the
WebView component of the chromium browser before 81.0.4044.92.
- CVE-2020-6438 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
extensions component of the chromium browser before 81.0.4044.92.
- CVE-2020-6439 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
navigations component of the chromium browser before 81.0.4044.92.
- CVE-2020-6440 (access restriction bypass)
An inappropriate implementation security issue has been found in the
extensions component of the chromium browser before 81.0.4044.92.
- CVE-2020-6441 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
omnibox component of the chromium browser before 81.0.4044.92.
- CVE-2020-6442 (access restriction bypass)
An inappropriate implementation security issue has been found in the
cache component of the chromium browser before 81.0.4044.92.
- CVE-2020-6443 (insufficient validation)
An insufficient data validation security issue has been found in the
developer tools component of the chromium browser before 81.0.4044.92.
- CVE-2020-6444 (information disclosure)
An uninitialized memory use issue has been found in the WebRTC
component of the chromium browser before 81.0.4044.92.
- CVE-2020-6445 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
trusted types component of the chromium browser before 81.0.4044.92.
- CVE-2020-6446 (access restriction bypass)
An insufficient policy enforcement security issue has been found in the
trusted types component of the chromium browser before 81.0.4044.92.
- CVE-2020-6447 (access restriction bypass)
An inappropriate implementation security issue has been found in the
developer tools component of the chromium browser before 81.0.4044.92.
- CVE-2020-6448 (arbitrary code execution)
A use-after-free security issue has been found in the V8 component of
the chromium browser before 81.0.4044.92.
- CVE-2020-6454 (arbitrary code execution)
A use after free security issue has been found in the extensions
component of the chromium browser before 81.0.4044.92.
- CVE-2020-6455 (information disclosure)
A out of bounds read security issue has been found in the WebSQL
component of the chromium browser before 81.0.4044.92.
- CVE-2020-6456 (insufficient validation)
An insufficient validation of untrusted input security issue has been
found in the clipboard component of the chromium browser before
81.0.4044.92.
Resolution
Upgrade to 81.0.4044.92-1.
# pacman -Syu "chromium>=81.0.4044.92-1"
The problems have been fixed upstream in version 81.0.4044.92.
References
https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html https://security.archlinux.org/CVE-2020-6423 https://security.archlinux.org/CVE-2020-6430 https://security.archlinux.org/CVE-2020-6431 https://security.archlinux.org/CVE-2020-6432 https://security.archlinux.org/CVE-2020-6433 https://security.archlinux.org/CVE-2020-6434 https://security.archlinux.org/CVE-2020-6435 https://security.archlinux.org/CVE-2020-6436 https://security.archlinux.org/CVE-2020-6437 https://security.archlinux.org/CVE-2020-6438 https://security.archlinux.org/CVE-2020-6439 https://security.archlinux.org/CVE-2020-6440 https://security.archlinux.org/CVE-2020-6441 https://security.archlinux.org/CVE-2020-6442 https://security.archlinux.org/CVE-2020-6443 https://security.archlinux.org/CVE-2020-6444 https://security.archlinux.org/CVE-2020-6445 https://security.archlinux.org/CVE-2020-6446 https://security.archlinux.org/CVE-2020-6447 https://security.archlinux.org/CVE-2020-6448 https://security.archlinux.org/CVE-2020-6454 https://security.archlinux.org/CVE-2020-6455 https://security.archlinux.org/CVE-2020-6456
Workaround
None.
