ASA-201610-1 log original external raw

Arch Linux Security Advisory ASA-201610-1 ========================================= Severity: Critical Date : 2016-10-03 CVE-ID : CVE-2016-5177 CVE-2016-5178 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-42 Summary ======= The package chromium before version 53.0.2785.143-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 53.0.2785.143-1. # pacman -Syu "chromium>=53.0.2785.143-1" The problems have been fixed upstream in version 53.0.2785.143. Workaround ========== None. Description =========== - CVE-2016-5177 (arbitrary code execution) A use after free flaw was found in the V8 component of the Chromium browser. - CVE-2016-5178 (arbitrary code execution) Various fixes from internal audits, fuzzing and other initiatives. Impact ====== A remote attacker could be able to execute arbitrary code. References ========== https://googlechromereleases.blogspot.fr/2016/09/stable-channel-update-for-desktop_29.html https://security.archlinux.org/CVE-2016-5177 https://security.archlinux.org/CVE-2016-5178