Para el conocimiento de todos.

-------- Mensaje reenviado --------
Asunto: Re: Is chromium updated?
Resent-Date: Sat, 17 Oct 2020 18:31:51 +0000 (UTC)
Resent-From: debian-secur...@lists.debian.org
Fecha: Sat, 17 Oct 2020 20:31:36 +0200 (CEST)
De: l0f...@tuta.io
Para: Debian Security <debian-secur...@lists.debian.org>

Hi,

17 oct. 2020 à 14:28 de ggunin...@gmail.com:

On Debian stable, I have chromium Version: 83.0.4103.116-1~deb10u3

>From Arch advisory on 2020-10-10:
The package chromium before version 86.0.4240.75-1 is vulnerable to
multiple issues including arbitrary code execution, access restriction
bypass, information disclosure and insufficient validation.
https://lists.archlinux.org/pipermail/arch-security/2020-October/001608.html

Is Debian's chromium vulnerable now?

I would say yes for the time being indeed: https://security-tracker.debian.org/tracker/source-package/chromium See "vulnerable" in 2nd column for CVE-2020-15967 to CVE-2020-15992 + CVE-2020-6557

Best regards,
l0f4r0


--
Errar es de humanos, pero es mas humano culpar a los demás

Responder a