Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Debian: DSA-2883-1 Critical: Chromium Browser Flaws Security Update

debian
Calendar Grey March 24, 2014
Scroller Debian
Critical patches released for the webkit-browser addressing several vulnerabilities needing prompt action.
Several vulnerabilities have been discovered in the chromium web browser
Topics%20covered

Topics Covered

security advisory critical software update debian web security browser flaws chromium-browser

Summary

CVE-2013-6653

Khalil Zhani discovered a use-after-free issue in chromium's web
contents color chooser.

CVE-2013-6654

TheShow3511 discovered an issue in SVG handling.

CVE-2013-6655

cloudfuzzer discovered a use-after-free issue in dom event handling.

CVE-2013-6656

NeexEmil discovered an information leak in the XSS auditor.

CVE-2013-6657

NeexEmil discovered a way to bypass the Same Origin policy in the
XSS auditor.

CVE-2013-6658

cloudfuzzer discovered multiple use-after-free issues surrounding
the updateWidgetPositions function.

CVE-2013-6659

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that
it was possible to trigger an unexpected certificate chain during
TLS renegotiation.

CVE-2013-6660

bishopjeffreys discovered an information leak in the drag and drop
implementation.

CVE-2013-6661

The Google Chrome team discovered and fixed multiple issues in
version 33.0.1750.117.

CVE-2013-6663

Atte Kettunen discovered a use-after-free issue...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: chromium-browser
CVE ID: CVE-2013-6653 CVE-2013-6654 CVE-2013-6655 CVE-2013-6656

Topics%20covered

Topics Covered

security advisory critical software update debian web security browser flaws chromium-browser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.