| Summary: | chromium-browser-stable new security issues fixed in 52.0.2743.116 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | Normal | CC: | cjw, davidwhodgins, sysadmin-bugs, wrw105 |
| Version: | 5 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/696700/ | ||
| Whiteboard: | has_procedure mga5-64-ok advisory | ||
| Source RPM: | chromium-browser-stable-52.0.2743.82-1.mga5.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2016-08-06 00:21:52 CEST
Packages are available for testing: MGA5 SRPM: chromium-browser-stable-52.0.2743.116-1.mga5.src.rpm RPMS: chromium-browser-stable-52.0.2743.116-1.mga5.i586.rpm chromium-browser-52.0.2743.116-1.mga5.i586.rpm chromium-browser-stable-52.0.2743.116-1.mga5.x86_64.rpm chromium-browser-52.0.2743.116-1.mga5.x86_64.rpm Advisory: Chromium-browser-stable 52.0.2743.116 fixes security issues: two heap overflow issues in pdfium (CVE-2016-5139 and CVE-2016-5140); an address bar spoofing problem (CVE-2016-5141); a use-after-free bug (CVE-2016-5142) and a same origin bypass problem (CVE-2016-5145) in blink; two parameter sanitization failures in DevTools (CVE-2016-5143 and CVE-2016-5144); and various fixes from upstream's internal audits, fuzzing, and other initiatives (CVE-2016-5146). References: http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5139 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5140 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5141 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5142 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5143 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5144 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5145 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5146 CC:
(none) =>
cjw tested mga5-64 general browsing, jetstream, acid3, youtube video all OK. CC:
(none) =>
wrw105
Dave Hodgins
2016-08-08 11:40:41 CEST
Keywords:
(none) =>
validated_update
David Walser
2016-08-08 22:03:45 CEST
URL:
(none) =>
http://lwn.net/Vulnerabilities/696700/ An update for this issue has been pushed to the Mageia Updates repository. http://advisories.mageia.org/MGASA-2016-0279.html Status:
NEW =>
RESOLVED |