Advisories » MGASA-2015-0389

Updated chromium-browser packages fix security vulnerabilities

Publication date: 03 Oct 2015
Modification date: 03 Oct 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-1303 , CVE-2015-1304

Description

Updated chromium-browser-stable packages fix security vulnerabilities:

Two flaws were found in the processing of malformed web content. A web page
containing malicious content could cause Chromium to bypass cross origin
restrictions, and access or modify data from an unrelated web site
(CVE-2015-1303, CVE-2015-1304).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16848
• http://googlechromereleases.blogspot.com/2015/09/stable-channel-refresh.html
• http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_15.html
• http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html
• https://rhn.redhat.com/errata/RHSA-2015-1841.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1303
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1304

SRPMS

5/core

• chromium-browser-stable-45.0.2454.101-1.mga5