MGASA-2013-0383
Vulnerability Summary
Timeline
Description
Updated chromium-browser-stable fixes multiple vulnerabilities Updated chromium-browser-stable packages fix security vulnerabilities: Pinkie Pie discovered multiple memory corruption issues (CVE-2013-6632). Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper (CVE-2013-6634). cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing commands (CVE-2013-6635). Bas Venis discovered an address bar spoofing issue (CVE-2013-6636). The chrome 31 development team discovered and fixed multiple issues with potential security impact (CVE-2013-6637). Jakob Kummerow of the Chromium project discovered a buffer overflow in the v8 javascript library (CVE-2013-6638). Jakob Kummerow of the Chromium project discovered an out-of-bounds write in the v8 javascript library (CVE-2013-6639). Jakob Kummerow of the Chromium project discovered an out-of-bounds read in the v8 javascript library (CVE-2013-6640).
Affected Systems
- mageia•chromium-browser-stable
< 31.0.1650.63-1.mga3 | < 31.0.1650.63-1.mga3.tainted
References (6)
- https://advisories.mageia.org/MGASA-2013-0383.html
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
- http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html
- http://www.debian.org/security/2013/dsa-2799
- http://www.debian.org/security/2013/dsa-2811
- https://bugs.mageia.org/show_bug.cgi?id=11935