Advisories » MGASA-2014-0121

Updated chromium-browser-stable package fixes security vulnerabilities

Publication date: 06 Mar 2014
Modification date: 06 Mar 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2013-6663 , CVE-2013-6664 , CVE-2013-6665 , CVE-2013-6666 , CVE-2013-6667 , CVE-2013-6668

Description

Use-after-free in svg images (CVE-2013-6663).
Use-after-free in speech recognition (CVE-2013-6664).
Heap buffer overflow in software rendering (CVE-2013-6665).
Chrome allows requests in flash header request (CVE-2013-6666).
Various fixes from internal audits, fuzzing and other initiatives
(CVE-2013-6667).
Multiple vulnerabilities in V8 fixed in version 3.24.35.10
(CVE-2013-6668).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=12945
• http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6663
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6664
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6665
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6666
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6667
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6668

SRPMS

3/core

• chromium-browser-stable-33.0.1750.146-1.mga3

3/tainted

• chromium-browser-stable-33.0.1750.146-1.mga3.tainted

4/core

• chromium-browser-stable-33.0.1750.146-1.mga4

4/tainted

• chromium-browser-stable-33.0.1750.146-1.mga4.tainted