Candidate: CVE-2018-6133 PublicDate: 2019-01-09 19:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6133 https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Khalil Zhani Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N [6.5 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (67.0.3396.62) precise/esm_chromium-browser: DNE trusty_chromium-browser: ignored (no longer updated) trusty/esm_chromium-browser: DNE (trusty was ignored [no longer updated]) xenial_chromium-browser: released (67.0.3396.99-0ubuntu0.16.04.2) artful_chromium-browser: released (67.0.3396.99-0ubuntu0.17.10.1) bionic_chromium-browser: released (67.0.3396.99-0ubuntu0.18.04.1) cosmic_chromium-browser: released (67.0.3396.99-0ubuntu1) devel_chromium-browser: released (67.0.3396.99-0ubuntu1) Patches_oxide-qt: upstream_oxide-qt: needs-triage precise/esm_oxide-qt: DNE trusty_oxide-qt: ignored (Ubuntu touch end-of-life) trusty/esm_oxide-qt: DNE (trusty was ignored [Ubuntu touch end-of-life]) xenial_oxide-qt: ignored (Ubuntu touch end-of-life) esm-infra/xenial_oxide-qt: ignored (Ubuntu touch end-of-life) artful_oxide-qt: ignored (reached end-of-life) bionic_oxide-qt: DNE cosmic_oxide-qt: DNE devel_oxide-qt: DNE