MGASA-2013-0278

Dashboard / Vulnerabilities / MGASA-2013-0278

MGASA-2013-0278

Summary: Updated chromium-browser-stable package fix security vulnerabilities

Details: The chrome 29 development team found various issues from internal fuzzing audits, and other studies (CVE-2013-2887). Krystian Bigaj discovered a file handling path sanitization issue (CVE-2013-2900). Alex Chapman discovered an integer overflow issue in ANGLE, the Almost Native Graphics Layer (CVE-2013-2901). cloudfuzzer discovered a use-after-free issue in XSLT (CVE-2013-2902). cloudfuzzer discovered a use-after-free issue in HTMLMediaElement (CVE-2013-2903). cloudfuzzer discovered a use-after-free issue in XML document parsing (CVE-2013-2904). Christian Jaeger discovered an information leak due to insufficient file permissions (CVE-2013-2905).

References: https://advisories.mageia.org/MGASA-2013-0278.html, https://bugs.mageia.org/show_bug.cgi?id=11049, http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html, http://googlechromereleases.blogspot.com/2013/09/stable-channel-update.html, http://www.debian.org/security/2013/dsa-2741