Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2018.0133 Chrome Stable Channel Update for Desktop 67.0.3396.87 13 June 2018 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Google Chrome Operating System: UNIX variants (UNIX, Linux, OSX) Windows Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction Denial of Service -- Remote with User Interaction Resolution: Patch/Upgrade CVE Names: CVE-2018-6149 Member content until: Friday, July 13 2018 OVERVIEW Multiple vulnerabilities have been addressed in Google Chrome for Windows, Mac and Linux version 67.0.3396.87. [1] IMPACT The vendor has provided the following summary: "[$TBD][848672] High CVE-2018-6149: Out of bounds write in V8. Reported by Yu Zhou and Jundong Xie of Ant-financial Light-Year Security Lab on 2018-06-01" [1] MITIGATION The vendor advises updating to Chrome 67.0.3396.87 to address these issues. [1] REFERENCES [1] Chrome Stable Channel Update for Desktop 67.0.3396.87 https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop_12.html AusCERT has made every effort to ensure that the information contained in this document is accurate. However, the decision to use the information described is the responsibility of each user or organisation. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iQIVAwUBWyCeDGaOgq3Tt24GAQiIVQ/9Fp5L1cLE/YnpDmPTbaMNziHj7XjohOlm MdTyUf3N/rA5B2vBuVJ4kucJwGNd0n2YsTBwpj+Nm+lwleZJ7UQMbzVZwAUGbTi4 TTKbFwz/3Hg36Snjsh6EN9feFWBwvTvClIMQ5TkWKMVgCy+EpWSJhtPRtAtHCbLD mQeC2r/6Xwmx4S9P/jVyKbBKQerlQ7kXfBf1+hISAtvNUFi3E3SiJMGP4q/WHSfS etUDs9Zoju+6jLTUbU8MTSvzKp23maHdrJ+lHpyLZNvhgeeZbV7bilRU4sQ6Hv/t pk9SDtrkVlvAYT8UlId+lwDpjcF+cI8hem1qjsC/VM25IC1lp+GloCvOiGKMwWy4 YCkByHcPFGRP2RGeYdm8BvfC9DitvEc2Z/bJD11PHIQVFbaYseJZqxTxQDtuQqUV TmyFsnxso/mlh+JMcf+vObhcE04TUmuEIrzq82L8QNUWpY6igBUGzPSDvdvBSlMG yAcMCy7ZTJ6JeN/V+VrvIvIq/5OhiE4XhYEZALWSyFy6J/dNUAOr1HEw/JA2f/Vz dwbH+BNKfNdIROZ/qA09hWHMGv3pC+f8x7u4G6Gd3i078NZGQNLVzeuzWuJRTLGL H4wJh//JCyrgjEDJYgBINxO5Ogr087VakjR3EmSe68buCYULxNM0uLiQm7lSCH/y vI8oSUnl58g= =g2qX -----END PGP SIGNATURE-----