Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs.

Vulnerabilities fixed :

  - CVE-2018-17478: Out of bounds memory access in V8     (boo#1115537)

  - Various fixes from internal audits, fuzzing and other     initiatives

Packaging changes :

  - noto-emoji-fonts is no longer a recommended dependency

Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110.

----

Update to chromium 70.0.3538.77. Fixes CVE-2018-16435 CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17473 CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-5179 CVE-2018-17477

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Chromium is an open source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 70.0.3538.110.

Security Fix(es) :

* chromium-browser: Use-after-free in GPU (CVE-2018-17479)

* chromium-browser: Out of bounds memory access in V8 (CVE-2018-17478)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

An out-of-bounds bounds memory access issue was discovered in chromium's v8 JavaScript library by cloudfuzzer.

This update also fixes two problems introduced by the previous security upload. Support for arm64 has been restored and gconf-service is no longer a package dependency.

The version of Google Chrome installed on the remote Windows host is prior to 70.0.3538.102. It is, therefore, affected by a vulnerability as noted in Google Chrome stable channel update release notes for 2018/11/09. Please refer to the release notes for additional information. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 70.0.3538.102. It is, therefore, affected by a vulnerability as noted in Google Chrome stable channel update release notes for 2018/11/09. Please refer to the release notes for additional information. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
123378	openSUSE Security Update : chromium (openSUSE-2019-928)	Nessus	SuSE Local Security Checks	high
120933	Fedora 28 : chromium (2018-fd194a1f14)	Nessus	Fedora Local Security Checks	high
120607	Fedora 29 : chromium (2018-8e866c5066)	Nessus	Fedora Local Security Checks	high
119167	RHEL 6 : chromium-browser (RHSA-2018:3648)	Nessus	Red Hat Local Security Checks	high
119084	openSUSE Security Update : chromium (openSUSE-2018-1434)	Nessus	SuSE Local Security Checks	high
119030	openSUSE Security Update : chromium (openSUSE-2018-1425)	Nessus	SuSE Local Security Checks	medium
119018	Debian DSA-4340-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	high
118887	Google Chrome < 70.0.3538.102 Vulnerability	Nessus	Windows	high
118886	Google Chrome < 70.0.3538.102 Vulnerability	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-17478

high

Tenable Plugins

high

high

high

high

high

medium

high

high

high