Stay Secure with the Latest Linux Advisories

security advisoryupdatecritical

Fedora 21 FEDORA-2015-6845 Critical: V8 ARM Fix for ARM-Only Issue

Fix for ARM-only CVE-2014-3152. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6845 2015-04-26 07:25:43 -------------------------------------------------------------------------------- Name : v8 Product : Fedora 21 Version : 3.14.5.10 Release : 18.fc21 URL : https://issues.chromium.org/issues Summary : JavaScript Engine Description : V8 is Google's open source JavaScript engine. V8 is written in C++ and is used in Google Chrome, the open source browser from Google. V8 implements ECMAScript as specified in ECMA-262, 3rd edition. -------------------------------------------------------------------------------- Update Information: Fix for ARM-only CVE-2014-3152 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 23 2015 Tom Callaway - 1:3.14.5.10-18 - backport security fix for ARM - CVE-2014-3152 * Thu Feb 19 2015 T.C. Hollingsworth - 1:3.14.5.10-17 - backports for nodejs 0.10.36 * Mon Jan 26 2015 David Tardon - 1:3.14.5.10-16 - rebuild for ICU 54.1 * Tue Dec 2 2014 Tom Callaway - 1:3.14.5.10-15 - use system valgrind header (bz1141483) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1101056 - CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114 https://bugzilla.redhat.com/show_bug.cgi?id=1101056 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update v8' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announcemailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Resolution for ARM-exclusive bug in v8 JavaScript engine upgrade for Fedora 21 tackles vital security issues efficiently.. Fedora ARM Security Update, v8 Engine Fix, CVE-2014-3152 Resolution. . Severity: Critical. LinuxSecurity.com Team

May 08, 2015 •Critical Fedora