--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6845
2015-04-26 07:25:43
--------------------------------------------------------------------------------

Name        : v8
Product     : Fedora 21
Version     : 3.14.5.10
Release     : 18.fc21
URL         : https://issues.chromium.org/issues
Summary     : JavaScript Engine
Description :
V8 is Google's open source JavaScript engine. V8 is written in C++ and is used
in Google Chrome, the open source browser from Google. V8 implements ECMAScript
as specified in ECMA-262, 3rd edition.

--------------------------------------------------------------------------------
Update Information:

Fix for ARM-only CVE-2014-3152
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 Tom Callaway  - 1:3.14.5.10-18
- backport security fix for ARM - CVE-2014-3152
* Thu Feb 19 2015 T.C. Hollingsworth  - 1:3.14.5.10-17
- backports for nodejs 0.10.36
* Mon Jan 26 2015 David Tardon  - 1:3.14.5.10-16
- rebuild for ICU 54.1
* Tue Dec  2 2014 Tom Callaway  - 1:3.14.5.10-15
- use system valgrind header (bz1141483)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1101056 - CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114
        https://bugzilla.redhat.com/show_bug.cgi?id=1101056
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update v8' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 21: v8 Security Update

May 8, 2015
Fix for ARM-only CVE-2014-3152

Summary

V8 is Google's open source JavaScript engine. V8 is written in C++ and is used

in Google Chrome, the open source browser from Google. V8 implements ECMAScript

as specified in ECMA-262, 3rd edition.

Update Information:

Fix for ARM-only CVE-2014-3152

Change Log

* Thu Apr 23 2015 Tom Callaway - 1:3.14.5.10-18 - backport security fix for ARM - CVE-2014-3152 * Thu Feb 19 2015 T.C. Hollingsworth - 1:3.14.5.10-17 - backports for nodejs 0.10.36 * Mon Jan 26 2015 David Tardon - 1:3.14.5.10-16 - rebuild for ICU 54.1 * Tue Dec 2 2014 Tom Callaway - 1:3.14.5.10-15 - use system valgrind header (bz1141483)

References

[ 1 ] Bug #1101056 - CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114 https://bugzilla.redhat.com/show_bug.cgi?id=1101056

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update v8' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : v8
Product : Fedora 21
Version : 3.14.5.10
Release : 18.fc21
URL : https://issues.chromium.org/issues
Summary : JavaScript Engine

Related News