[SECURITY] [DSA 2959-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2959-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2014-3154 Collin Payne discovered a use-after-free issue in the filesystem API. CVE-2014-3155 James March, Daniel Sommermann, and Alan Frindell discovered several out-of-bounds read issues in the SPDY protocol...

CVE-2014-3154

Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/childthread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown...

Design/Logic Flaw

Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/childthread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown...

CVE-2014-3154

Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/childthread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown...

CVE-2014-3154

Removed by vendor...

CVE-2014-3154

Chromium/Google Chrome before 35.0.1916.153 is affected by CVE-2014-3154, a use-after-free in the filesystem API (ChildThread::Shutdown) that can cause a denial of service or other impact. OpenSUSE and Debian advisories confirm the fix in version 35.0.1916.153 (or newer) and recommend upgrading c...

CVE-2014-3154

Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/childthread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown...

UBUNTU-CVE-2014-3154

Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/childthread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 4 security fixes in this release, including: 369525 High CVE-2014-3154: Use-after-free in filesystem api. Credit to Collin Payne. 369539 High CVE-2014-3155: Out-if-bounds read in SPDY. Credit to James March, Daniel Sommermann and Alan Frindell of Facebook. 369621...