ESB-2018.1314 - [Debian] chromium-browser: Multiple vulnerabilities - 2018-05-01


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2018.1314
                     chromium-browser security update
                                1 May 2018

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           chromium-browser
Publisher:         Debian
Operating System:  Debian GNU/Linux 9
Impact/Access:     Execute Arbitrary Code/Commands -- Remote with User Interaction
                   Denial of Service               -- Remote with User Interaction
                   Provide Misleading Information  -- Remote with User Interaction
                   Access Confidential Data        -- Remote with User Interaction
                   Reduced Security                -- Remote with User Interaction
Resolution:        Patch/Upgrade
CVE Names:         CVE-2018-6117 CVE-2018-6116 CVE-2018-6114
                   CVE-2018-6113 CVE-2018-6112 CVE-2018-6111
                   CVE-2018-6110 CVE-2018-6109 CVE-2018-6108
                   CVE-2018-6107 CVE-2018-6106 CVE-2018-6105
                   CVE-2018-6104 CVE-2018-6103 CVE-2018-6102
                   CVE-2018-6101 CVE-2018-6100 CVE-2018-6099
                   CVE-2018-6098 CVE-2018-6097 CVE-2018-6096
                   CVE-2018-6095 CVE-2018-6094 CVE-2018-6093
                   CVE-2018-6092 CVE-2018-6091 CVE-2018-6090
                   CVE-2018-6089 CVE-2018-6088 CVE-2018-6087
                   CVE-2018-6086 CVE-2018-6085 CVE-2018-6083
                   CVE-2018-6082 CVE-2018-6081 CVE-2018-6080
                   CVE-2018-6079 CVE-2018-6078 CVE-2018-6077
                   CVE-2018-6076 CVE-2018-6075 CVE-2018-6074
                   CVE-2018-6073 CVE-2018-6072 CVE-2018-6071
                   CVE-2018-6070 CVE-2018-6069 CVE-2018-6068
                   CVE-2018-6067 CVE-2018-6066 CVE-2018-6065
                   CVE-2018-6064 CVE-2018-6063 CVE-2018-6062
                   CVE-2018-6061 CVE-2018-6060 CVE-2018-6057
                   CVE-2018-6056  

Reference:         ASB-2018.0050
                   ASB-2018.0048
                   ESB-2018.0725
                   ESB-2018.0507

Original Bulletin: 
   http://www.debian.org/security/2018/dsa-4182

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- - -------------------------------------------------------------------------
Debian Security Advisory DSA-4182-1                   security@debian.org
https://www.debian.org/security/                          Michael Gilbert
April 28, 2018                        https://www.debian.org/security/faq
- - -------------------------------------------------------------------------

Package        : chromium-browser
CVE ID         : CVE-2018-6056 CVE-2018-6057 CVE-2018-6060 CVE-2018-6061
                 CVE-2018-6062 CVE-2018-6063 CVE-2018-6064 CVE-2018-6065
                 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069
                 CVE-2018-6070 CVE-2018-6071 CVE-2018-6072 CVE-2018-6073
                 CVE-2018-6074 CVE-2018-6075 CVE-2018-6076 CVE-2018-6077
                 CVE-2018-6078 CVE-2018-6079 CVE-2018-6080 CVE-2018-6081
                 CVE-2018-6082 CVE-2018-6083 CVE-2018-6085 CVE-2018-6086
                 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090
                 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094
                 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098
                 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102
                 CVE-2018-6103 CVE-2018-6104 CVE-2018-6105 CVE-2018-6106
                 CVE-2018-6107 CVE-2018-6108 CVE-2018-6109 CVE-2018-6110
                 CVE-2018-6111 CVE-2018-6112 CVE-2018-6113 CVE-2018-6114
                 CVE-2018-6116 CVE-2018-6117

Several vulnerabilities have been discovered in the chromium web browser.

CVE-2018-6056

    lokihardt discovered an error in the v8 javascript library.

CVE-2018-6057

    Gal Beniamini discovered errors related to shared memory permissions.

CVE-2018-6060

    Omair discovered a use-after-free issue in blink/webkit.

CVE-2018-6061

    Guang Gong discovered a race condition in the v8 javascript library.

CVE-2018-6062

    A heap overflow issue was discovered in the v8 javascript library.

CVE-2018-6063

    Gal Beniamini discovered errors related to shared memory permissions.

CVE-2018-6064

    lokihardt discovered a type confusion error in the v8 javascript
    library.

CVE-2018-6065

    Mark Brand discovered an integer overflow issue in the v8 javascript
    library.

CVE-2018-6066

    Masato Kinugawa discovered a way to bypass the Same Origin Policy.

CVE-2018-6067

    Ned Williamson discovered a buffer overflow issue in the skia library.

CVE-2018-6068

    Luan Herrera discovered object lifecycle issues.

CVE-2018-6069

    Wanglu and Yangkang discovered a stack overflow issue in the skia
    library.

CVE-2018-6070

    Rob Wu discovered a way to bypass the Content Security Policy.

CVE-2018-6071

    A heap overflow issue was discovered in the skia library.

CVE-2018-6072

    Atte Kettunen discovered an integer overflow issue in the pdfium
    library.

CVE-2018-6073

    Omair discover a heap overflow issue in the WebGL implementation.

CVE-2018-6074

    Abdulrahman Alqabandi discovered a way to cause a downloaded web page
    to not contain a Mark of the Web.

CVE-2018-6075

    Inti De Ceukelaire discovered a way to bypass the Same Origin Policy.

CVE-2018-6076

    Mateusz Krzeszowiec discovered that URL fragment identifiers could be
    handled incorrectly.

CVE-2018-6077

    Khalil Zhani discovered a timing issue.

CVE-2018-6078

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6079

    Ivars discovered an information disclosure issue.

CVE-2018-6080

    Gal Beniamini discovered an information disclosure issue.

CVE-2018-6081

    Rob Wu discovered a cross-site scripting issue.

CVE-2018-6082

    WenXu Wu discovered a way to bypass blocked ports.

CVE-2018-6083

    Jun Kokatsu discovered that AppManifests could be handled incorrectly.

CVE-2018-6085

    Ned Williamson discovered a use-after-free issue.

CVE-2018-6086

    Ned Williamson discovered a use-after-free issue.

CVE-2018-6087

    A use-after-free issue was discovered in the WebAssembly implementation.

CVE-2018-6088

    A use-after-free issue was discovered in the pdfium library.

CVE-2018-6089

    Rob Wu discovered a way to bypass the Same Origin Policy.

CVE-2018-6090

    ZhanJia Song discovered a heap overflow issue in the skia library.

CVE-2018-6091

    Jun Kokatsu discovered that plugins could be handled incorrectly.

CVE-2018-6092

    Natalie Silvanovich discovered an integer overflow issue in the
    WebAssembly implementation.

CVE-2018-6093

    Jun Kokatsu discovered a way to bypass the Same Origin Policy.

CVE-2018-6094

    Chris Rohlf discovered a regression in garbage collection hardening.

CVE-2018-6095

    Abdulrahman Alqabandi discovered files could be uploaded without user
    interaction.

CVE-2018-6096

    WenXu Wu discovered a user interface spoofing issue.

CVE-2018-6097

    xisigr discovered a user interface spoofing issue.

CVE-2018-6098

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6099

    Jun Kokatsu discovered a way to bypass the Cross Origin Resource
    Sharing mechanism.

CVE-2018-6100

    Lnyas Zhang dsicovered a URL spoofing issue.

CVE-2018-6101

    Rob Wu discovered an issue in the developer tools remote debugging
    protocol.

CVE-2018-6102

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6103

    Khalil Zhani discovered a user interface spoofing issue.

CVE-2018-6104

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6105

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6106

    lokihardt discovered that v8 promises could be handled incorrectly.

CVE-2018-6107

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6108

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6109

    Dominik Weber discovered a way to misuse the FileAPI feature.

CVE-2018-6110

    Wenxiang Qian discovered that local plain text files could be handled
    incorrectly.

CVE-2018-6111

    Khalil Zhani discovered a use-after-free issue in the developer tools.

CVE-2018-6112

    Khalil Zhani discovered incorrect handling of URLs in the developer
    tools.

CVE-2018-6113

    Khalil Zhani discovered a URL spoofing issue.

CVE-2018-6114

    Lnyas Zhang discovered a way to bypass the Content Security Policy.

CVE-2018-6116

    Chengdu Security Response Center discovered an error when memory
    is low.

CVE-2018-6117

    Spencer Dailey discovered an error in form autofill settings.

For the oldstable distribution (jessie), security support for chromium
has been discontinued.

For the stable distribution (stretch), these problems have been fixed in
version 66.0.3359.117-1~deb9u1.

We recommend that you upgrade your chromium-browser packages.

For the detailed security status of chromium-browser please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium-browser

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
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=kD3V
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=Xkih
-----END PGP SIGNATURE-----