MGASA-2013-0324

Dashboard / Vulnerabilities / MGASA-2013-0324

MGASA-2013-0324

Summary: Updated chromium-browser-stable packages fix multiple vulnerabilities

Details: Updated chromium-browser-stable packages fix security vulnerabilities: Various fixes from internal audits, fuzzing and other initiatives (CVE-2013-2931). Use after free related to speech input elements (CVE-2013-6621). Use after free related to media elements (CVE-2013-6622). Out of bounds read in SVG (CVE-2013-6623). Use after free related to 'id' attribute strings (CVE-2013-6624). Use after free in DOM ranges (CVE-2013-6625). Address bar spoofing related to interstitial warnings (CVE-2013-6626). Out of bounds read in HTTP parsing (CVE-2013-6627). Issue with certificates not being checked during TLS renegotiation (CVE-2013-6628). libjpeg 6b and libjpeg-turbo will use uninitialized memory when decoding images with missing SOS data for the luminance component (Y) in presence of valid chroma data (Cr, Cb) (CVE-2013-6629). libjpeg-turbo will use uninitialized memory when handling Huffman tables (CVE-2013-6630). Use after free in libjingle (CVE-2013-6631).

References: https://advisories.mageia.org/MGASA-2013-0324.html, http://permalink.gmane.org/gmane.comp.security.full-disclosure/90919, http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html, https://bugs.mageia.org/show_bug.cgi?id=11657