Advisories » MGASA-2014-0428

Updated chromium-browser-stable packages fix security vulnerabilities

Publication date: 28 Oct 2014
Modification date: 18 Nov 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-3188 , CVE-2014-3189 , CVE-2014-3190 , CVE-2014-3191 , CVE-2014-3192 , CVE-2014-3193 , CVE-2014-3194 , CVE-2014-3195 , CVE-2014-3197 , CVE-2014-3198 , CVE-2014-3199 , CVE-2014-3200

Description

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Chromium to crash or,
potentially, execute arbitrary code with the privileges of the user running
Chromium (CVE-2014-3188, CVE-2014-3189, CVE-2014-3190, CVE-2014-3191,
CVE-2014-3192, CVE-2014-3193, CVE-2014-3194, CVE-2014-3199, CVE-2014-3200).

Several information leak flaws were found in the processing of malformed
web content. A web page containing malicious content could cause Chromium
to disclose potentially sensitive information (CVE-2014-3195,
CVE-2014-3197, CVE-2014-3198).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14258
• http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html
• http://googlechromereleases.blogspot.com/2014/10/stable-channel-update_14.html
• https://rhn.redhat.com/errata/RHSA-2014-1626.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3188
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3189
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3190
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3191
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3192
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3193
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3194
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3195
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3197
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3198
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3199
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3200

SRPMS

3/tainted

• chromium-browser-stable-38.0.2125.104-1.mga3.tainted

3/core

• chromium-browser-stable-38.0.2125.104-1.mga3

4/core

• chromium-browser-stable-38.0.2125.104-1.mga4

4/tainted

• chromium-browser-stable-38.0.2125.104-1.mga4.tainted