ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2023.0289
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2023-0289)
Resumen:	The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2023-0289 advisory.
Descripción:	Summary: The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2023-0289 advisory. Vulnerability Insight: The chromium-browser-stable package has been updated to the 118.0.5993.70 release, fixing 20 bugs and vulnerabilities. Some of the security fixes are: Critical CVE-2023-5218: Use after free in Site Isolation. Reported by @18 on 2023-09-27 Medium CVE-2023-5487: Inappropriate implementation in Fullscreen. Reported by Anonymous on 2020-03-17 Medium CVE-2023-5484: Inappropriate implementation in Navigation. Reported by Thomas Orlita on 2023-02-11 Medium CVE-2023-5475: Inappropriate implementation in DevTools. Reported by Axel Chong on 2023-08-30 Medium CVE-2023-5483: Inappropriate implementation in Intents. Reported by Axel Chong on 2023-03-17 Medium CVE-2023-5481: Inappropriate implementation in Downloads. Reported by Om Apip on 2023-06-28 Medium CVE-2023-5476: Use after free in Blink History. Reported by Yunqin Sun on 2023-08-20 Medium CVE-2023-5474: Heap buffer overflow in PDF. Reported by [pwn2car] on 2023-09-15 Medium CVE-2023-5479: Inappropriate implementation in Extensions API. Reported by Axel Chong on 2023-08-09 Low CVE-2023-5485: Inappropriate implementation in Autofill. Reported by Ahmed ElMasry on 2022-12-02 Low CVE-2023-5478: Inappropriate implementation in Autofill. Reported by Ahmed ElMasry on 2023-08-12 Low CVE-2023-5477: Inappropriate implementation in Installer. Reported by Bahaa Naamneh of Crosspoint Labs on 2023-08-13 Low CVE-2023-5486: Inappropriate implementation in Input. Reported by Hafiizh on 2022-08-29 Low CVE-2023-5473: Use after free in Cast. Reported by DarkNavy on 2023-09-18 Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed. Affected Software/OS: 'chromium-browser-stable' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-5218 Debian Security Information: DSA-5526 (Google Search) https://www.debian.org/security/2023/dsa-5526 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F5QCMP6KKWPDZZLFU7YXSZDHEKOE7BXO/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4GHJ3FK5NPHDRUR4OJOI4UU6FKSOOGG/ https://security.gentoo.org/glsa/202311-11 https://security.gentoo.org/glsa/202312-07 https://security.gentoo.org/glsa/202401-34 https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html https://crbug.com/1487110 Common Vulnerability Exposure (CVE) ID: CVE-2023-5473 https://crbug.com/1484000 Common Vulnerability Exposure (CVE) ID: CVE-2023-5474 https://crbug.com/1483194 Common Vulnerability Exposure (CVE) ID: CVE-2023-5475 https://crbug.com/1476952 Common Vulnerability Exposure (CVE) ID: CVE-2023-5476 https://crbug.com/1474253 Common Vulnerability Exposure (CVE) ID: CVE-2023-5477 https://crbug.com/1472558 Common Vulnerability Exposure (CVE) ID: CVE-2023-5478 https://crbug.com/1472404 Common Vulnerability Exposure (CVE) ID: CVE-2023-5479 https://crbug.com/1471253 Common Vulnerability Exposure (CVE) ID: CVE-2023-5481 https://crbug.com/1458934 Common Vulnerability Exposure (CVE) ID: CVE-2023-5483 https://crbug.com/1425355 Common Vulnerability Exposure (CVE) ID: CVE-2023-5484 https://crbug.com/1414936 Common Vulnerability Exposure (CVE) ID: CVE-2023-5485 https://crbug.com/1395164 Common Vulnerability Exposure (CVE) ID: CVE-2023-5486 https://crbug.com/1357442 Common Vulnerability Exposure (CVE) ID: CVE-2023-5487 https://crbug.com/1062251
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.