Linux · Security advisory · May 10, 2024

DSA-5687-1: chromium security update

DSA-5687-1, released May 10, 2024, fixes 1 CVE in chromium (version 124.0.6367.201-1~deb12u1). One of them is being exploited (CVE-2024-4671); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
1 rated Critical
Exploited
1
CVE-2024-4671
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0835
94th percentile

Fixed package versions

ProductReleaseFixed in
chromiumDebian 12.15 (bookworm)124.0.6367.201-1~deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-4671 Chromium: CVE-2024-4671 Use after free in Visuals 9.6 0.0835 KEVExploited
Showing 1 to 1 of 1 1