This update for chromium to version 64.0.3282.140 fixes the following security issues :

  - CVE-2018-6406: Various asan fixes (boo#1078463,     boo#1079021) The regular expression library re2 was     updated to 2018-02-01.

このchromiumのバージョン64.0.3282.140への更新では、以下のセキュリティ問題を修正します：

  - CVE-2018-6406：複数のasanの修正（boo#1078463、boo#1079021）。正規表現ライブラリre2は、2018-02-01に更新されました。

Chromium 65へ更新します。EPEL7では、正常なビルドが可能になってから長い時間が経過しているため、多数のCVEが修正されています。

CVE-2017-15396 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15422 CVE-2018-6056 CVE-2018-6406 CVE-2018-6057 CVE-2018-6058 CVE-2018-6059 CVE-2018-6060 CVE-2018-6061 CVE-2018-6062 CVE-2018-6063 CVE-2018-6064 CVE-2018-6065 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069 CVE-2018-6070 CVE-2018-6071

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Update to Chromium 65. For EPEL7, it has been a long time since a successful build has been possible, so this will fix a LOT of CVEs.

CVE-2017-15396 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15422 CVE-2018-6056 CVE-2018-6406 CVE-2018-6057 CVE-2018-6058 CVE-2018-6059 CVE-2018-6060 CVE-2018-6061 CVE-2018-6062 CVE-2018-6063 CVE-2018-6064 CVE-2018-6065 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069 CVE-2018-6070 CVE-2018-6071

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - chromium-browser: Heap buffer overflow in clipboard (CVE-2020-16025)

  - chromium-browser: Insufficient data validation in cros-disks (CVE-2020-16035)

  - The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not     validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an     information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or     possibly have unspecified other impact. (CVE-2018-6406)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
106601	openSUSE Security Update : chromium (openSUSE-2018-128)	Nessus	SuSE Local Security Checks	2018/2/5	2021/1/19	high
106601	openSUSEセキュリティ更新プログラム：chromium（openSUSE-2018-128）	Nessus	SuSE Local Security Checks	2018/2/5	2021/1/19	high
108679	Fedora 27：chromium（2018-faff5f661e）	Nessus	Fedora Local Security Checks	2018/3/28	2022/6/8	high
108679	Fedora 27 : chromium (2018-faff5f661e)	Nessus	Fedora Local Security Checks	2018/3/28	2022/6/8	high
120695	Fedora 28：chromium（2018-aafdbb5554）	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/1	high
198723	RHEL 6 : chromium-browser (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
120695	Fedora 28 : chromium (2018-aafdbb5554)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/1	high

検出

プラグインの検索

high

high

high

high

high

critical

high