MGASA-2014-0213

Dashboard / Vulnerabilities / MGASA-2014-0213

MGASA-2014-0213

Summary: Updated chromium-browser-stable packages fix multiple vulnerabilities

Details: Updated chromium-browser-stable packages fix security vulnerabilities: A type confusion issue was discovered in the v8 javascript library (CVE-2014-1730). John Butler discovered a type confusion issue in the WebKit/Blink document object model implementation (CVE-2014-1731). Khalil Zhani discovered a use-after-free issue in the speech recognition feature (CVE-2014-1732). Jed Davis discovered a way to bypass the seccomp-bpf sandbox (CVE-2014-1733). The Google Chrome development team discovered and fixed multiple issues with potential security impact (CVE-2014-1734). The Google Chrome development team discovered and fixed multiple issues in version 3.24.35.33 of the v8 javascript library (CVE-2014-1735). SkyLined discovered an integer overlflow issue in the v8 javascript library (CVE-2014-1736).

References: https://advisories.mageia.org/MGASA-2014-0213.html, http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html, https://www.debian.org/security/2014/dsa-2920, https://bugs.mageia.org/show_bug.cgi?id=13325