openSUSE 13.1: 2014:0501-1 Important: Chromium Important Security Fix
opensuse
April 9, 2014
An update that fixes 9 vulnerabilities is now available.
Description
Chromium was updated to the 33.0.1750.152 stable channel
uodate:
- Security fixes:
* CVE-2014-1713: Use-after-free in Blink bindings
* CVE-2014-1714: Windows clipboard vulnerability
* CVE-2014-1705: Memory corruption in V8
* CVE-2014-1715: Directory traversal issue
Previous stable channel update 33.0.1750.149:
- Security fixes:
* CVE-2014-1700: Use-after-free in speech
* CVE-2014-1701: UXSS in events
* CVE-2014-1702: Use-after-free in web database
* CVE-2014-1703: Potential sandbox escape due to a
use-after-free in web sockets
* CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
version 3.23.17.18
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 13.1:
zypper in -t patch openSUSE-2014-280
- openSUSE 12.3:
zypper in -t patch openSUSE-2014-280
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE 13.1 (i586 x86_64):
chromedriver-33.0.1750.152-25.2
chromedriver-debuginfo-33.0.1750.152-25.2
chromium-33.0.1750.152-25.2
chromium-debuginfo-33.0.1750.152-25.2
chromium-debugsource-33.0.1750.152-25.2
chromium-desktop-gnome-33.0.1750.152-25.2
chromium-desktop-kde-33.0.1750.152-25.2
chromium-ffmpegsumo-33.0.1750.152-25.2
chromium-ffmpegsumo-debuginfo-33.0.1750.152-25.2
chromium-suid-helper-33.0.1750.152-25.2
chromium-suid-helper-debuginfo-33.0.1750.152-25.2
- openSUSE 12.3 (i586 x86_64):
chromedriver-33.0.1750.152-1.33.2
chromedriver-debuginfo-33.0.1750.152-1.33.2
chromium-33.0.1750.152-1.33.2
chromium-debuginfo-33.0.1750.152-1.33.2
chromium-debugsource-33.0.1750.152-1.33.2
chromium-desktop-gnome-33.0.1750.152-1.33.2
chromium-desktop-kde-33.0.1750.152-1.33.2
chromium-ffmpegsumo-33.0.1750.152-1.33.2
chromium-ffmpegsumo-debuginfo-33.0.1750.152-1.33.2
chromium-suid-helper-33.0.1750.152-1.33.2
chromium-suid-helper-debuginfo-33.0.1750.152-1.33.2
References
https://www.suse.com/security/cve/CVE-2014-1700.html
https://www.suse.com/security/cve/CVE-2014-1701.html
https://www.suse.com/security/cve/CVE-2014-1702.html
https://www.suse.com/security/cve/CVE-2014-1703.html
https://www.suse.com/security/cve/CVE-2014-1704.html
https://www.suse.com/security/cve/CVE-2014-1705.html
https://www.suse.com/security/cve/CVE-2014-1713.html
https://www.suse.com/security/cve/CVE-2014-1714.html
https://www.suse.com/security/cve/CVE-2014-1715.html
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2014:0501-1
Rating: important
Affected Products:
openSUSE 13.1
openSUSE 12.3
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!