Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Debian: DSA-2938-1 Urgent: Firefox Security Vulnerability Reported

debian
Calendar Grey February 16, 2014
Scroller Debian
Critical flaws detected in the chromium internet client demand prompt fixes and revisions for users of Debian.
Several vulnerabilities have been discovered in the chromium web browser
Topics%20covered

Topics Covered

security advisory debian memory corruption upgrade use-after-free browser issues

Summary

CVE-2013-6641

Atte Kettunen discovered a use-after-free issue in Blink/Webkit form
elements.

CVE-2013-6643

Joao Lucas Melo Brasio discovered a Google account information
disclosure issue related to the one-click sign-on feature.

CVE-2013-6644

The chrome development team discovered and fixed multiple issues with
potential security impact.

CVE-2013-6645

Khalil Zhani discovered a use-after-free issue related to speech input.

CVE-2013-6646

Colin Payne discovered a use-after-free issue in the web workers implementation.

CVE-2013-6649

Atte Kettunen discovered a use-after-free issue in the Blink/Webkit
SVG implementation.

CVE-2013-6650

Christian Holler discovered a memory corruption in the v8 javascript
library.

For the stable distribution (wheezy), these problems have been fixed in
version 32.0.1700.123-1~deb7u1.

For the testing distribution (jessie), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
ver...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Package: chromium-browser
CVE ID: CVE-2013-6641 CVE-2013-6643 CVE-2013-6644 CVE-2013-6645

Topics%20covered

Topics Covered

security advisory debian memory corruption upgrade use-after-free browser issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.