FreeBSD : chromium -- multiple vulnerabilities (b57f690e-ecc9-11e4-876c-00262d5ed8ee)

Google Chrome Releases reports : 45 new security fixes, including : - 456518 High CVE-2015-1235: Cross-origin-bypass in HTML parser. Credit to anonymous. - 313939 Medium CVE-2015-1236: Cross-origin-bypass in Blink. Credit to Amitay Dobo. - 461191 High CVE-2015-1237: Use-after-free in IPC. Credit ...

[SECURITY] [DSA 3238-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3238-1 [email protected] http://www.debian.org/security/ Michael Gilbert April 26, 2015 http://www.debian.org/security/faq -...

DSA-3238-1 chromium-browser - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3238-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 42.0.2311.90 fixes several security issues, among others a cross-origin-bypass in HTML parser CVE-2015-1235, a cross-origin-bypass in Blink CVE-2015-1236, a use-after-free in IPC CVE-2015-1237, an out-of-bounds write in Skia CVE-2015-1238, an out-of-bounds read in WebGL...

Google Chrome 'SearchEngineTabHelper::OnPageHasOSDD' Information Disclosure Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the 'SearchEngineTabHelper:: OnPageHasOSDD' function in the browser/ui/searchengines/searchenginetabhelper.cc file in Google Chrome versions prior to 42.0.2311.90, which originates from a failure to...

CVE-2015-1247

The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...

CVE-2015-1247

The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...

Code injection

The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...

CVE-2015-1247

The CVE-2015-1247 issue affects Google Chrome’s OpenSearch handling: the SearchEngineTabHelper::OnPageHasOSDD function did not sanitize file: URLs in OpenSearch descriptor XML, potentially allowing a remote site to read local files via a crafted http/https page. Affected: Chrome before 42.0.2311....

CVE-2015-1247

The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...

chromium: multiple issues

CVE-2015-1235 cross-origin bypass A vulnerability was discovered that allows cross-origin-bypass in the HTML parser. - CVE-2015-1236 cross-origin bypass A vulnerability was discovered that allows cross-origin-bypass in the rendering engine Blink. - CVE-2015-1237 arbitrary code execution An...

chromium-browser: Scheme issues in OpenSearch

The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...

Fedora 14 : mediawiki-1.16.4-58.fc14 (2011-5812)

This update brings mediawiki to version 1.16.4, which is the latest stable release at the moment, but currently also the only supported and recommended release by the mediawiki developer community. Further changes : - some simple wiki management functionality was added : - mw-createinstance creat...

Fedora 13 : mediawiki-1.16.4-58.fc13 (2011-5807)

This update brings mediawiki to version 1.16.4, which is the latest stable release at the moment, but currently also the only supported and recommended release by the mediawiki developer community. Further changes : - some simple wiki management functionality was added : - mw-createinstance creat...

Fedora 15 : mediawiki-1.16.4-58.fc15 (2011-5848)

This update brings mediawiki to version 1.16.4, which is the latest stable release at the moment, but currently also the only supported and recommended release by the mediawiki developer community. Further changes : - some simple wiki management functionality was added : - mw-createinstance creat...

Fedora 15 : mediawiki-1.16.4-57.fc15 (2011-5495)

This update brings mediawiki to version 1.16.2, which is the latest stable release at the moment, but currently also the only supported and recommended release by the mediawiki developer community. Further changes : - some simple wiki management functionality was added : - mw-createinstance creat...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

[SECURITY] Fedora 7 Update: midori-0.0.17-3.fc7

Midori is a lightweight web browser, and has many features expected of a modern browser, including: Full integration with GTK+2. Fast rendering with WebKit. Tabs, windows and session management. Bookmarks are stored with XBEL. Searchbox based on OpenSearch. Custom context menu actions. User scrip...

[SECURITY] Fedora 8 Update: midori-0.0.17-3.fc8

Midori is a lightweight web browser, and has many features expected of a modern browser, including: Full integration with GTK+2. Fast rendering with WebKit. Tabs, windows and session management. Bookmarks are stored with XBEL. Searchbox based on OpenSearch. Custom context menu actions. User scrip...