https://www.theregister.com/2020/11/04/google_chrome_critical_updates/
Wed 4 Nov 2020 If you're an update laggard, buck up: Chrome zero-days are being exploited in the wild Desktop and Android versions both at risk On Sat, Oct 17, 2020 at 9:31 PM <l0f...@tuta.io> wrote: > > Hi, > > 17 oct. 2020 à 14:28 de ggunin...@gmail.com: > > > On Debian stable, I have chromium Version: 83.0.4103.116-1~deb10u3 > > > > >From Arch advisory on 2020-10-10: > > The package chromium before version 86.0.4240.75-1 is vulnerable to > > multiple issues including arbitrary code execution, access restriction > > bypass, information disclosure and insufficient validation. > > https://lists.archlinux.org/pipermail/arch-security/2020-October/001608.html > > > > Is Debian's chromium vulnerable now? > > > I would say yes for the time being indeed: > https://security-tracker.debian.org/tracker/source-package/chromium > See "vulnerable" in 2nd column for CVE-2020-15967 to CVE-2020-15992 + > CVE-2020-6557 > > Best regards, > l0f4r0 >