Candidate: CVE-2018-6142 PublicDate: 2019-06-27 17:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6142 https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html Description: Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Ubuntu-Description: Notes: mikesalvatore> The Ubuntu Security Team does not support libv8 Bugs: Priority: medium Discovered-by: Choongwoo Han Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (67.0.3396.62) precise/esm_chromium-browser: DNE trusty_chromium-browser: ignored (no longer updated) trusty/esm_chromium-browser: DNE (trusty was ignored [no longer updated]) xenial_chromium-browser: released (67.0.3396.99-0ubuntu0.16.04.2) artful_chromium-browser: released (67.0.3396.99-0ubuntu0.17.10.1) bionic_chromium-browser: released (67.0.3396.99-0ubuntu0.18.04.1) cosmic_chromium-browser: released (67.0.3396.99-0ubuntu1) devel_chromium-browser: released (67.0.3396.99-0ubuntu1) Patches_oxide-qt: upstream_oxide-qt: needs-triage precise/esm_oxide-qt: DNE trusty_oxide-qt: ignored (Ubuntu touch end-of-life) trusty/esm_oxide-qt: DNE (trusty was ignored [Ubuntu touch end-of-life]) xenial_oxide-qt: ignored (Ubuntu touch end-of-life) esm-infra/xenial_oxide-qt: ignored (Ubuntu touch end-of-life) artful_oxide-qt: ignored (reached end-of-life) bionic_oxide-qt: DNE cosmic_oxide-qt: DNE devel_oxide-qt: DNE Patches_libv8-3.14: upstream_libv8-3.14: needs-triage precise/esm_libv8-3.14: DNE trusty_libv8-3.14: ignored (libv8 not supported) trusty/esm_libv8-3.14: DNE (trusty was ignored [libv8 not supported]) xenial_libv8-3.14: ignored (libv8 not supported) artful_libv8-3.14: ignored (reached end-of-life) bionic_libv8-3.14: ignored (libv8 not supported) cosmic_libv8-3.14: ignored (libv8 not supported) devel_libv8-3.14: ignored (libv8 not supported)