Lucene search

K
suseSuseOPENSUSE-SU-2014:1626-1
HistoryDec 12, 2014 - 9:04 a.m.

Security update for chromium (important)

2014-12-1209:04:56
lists.opensuse.org
17

0.096 Low

EPSS

Percentile

94.2%

chromium was updated to version 39.0.2171.65 to fix 13 security issues.

These security issues were fixed:

  • Use-after-free in pepper plugins (CVE-2014-7906).
  • Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google
    Chromebefore 39.0.2171.65, al… (CVE-2014-7903).
  • Uninitialized memory read in Skia (CVE-2014-7909).
  • Unspecified security issues (CVE-2014-7910).
  • Integer overflow in media (CVE-2014-7908).
  • Integer overflow in the opj_t2_read_packet_data function
    infxcodec/fx_libopenjpeg/libopenjpeg20/t2… (CVE-2014-7901).
  • Use-after-free in blink (CVE-2014-7907).
  • Address bar spoofing (CVE-2014-7899).
  • Buffer overflow in Skia (CVE-2014-7904).
  • Use-after-free vulnerability in the CPDF_Parser (CVE-2014-7900).
  • Use-after-free vulnerability in PDFium allows DoS (CVE-2014-7902).
  • Flaw allowing navigation to intents that do not have the BROWSABLE
    category (CVE-2014-7905).
  • Double-free in Flash (CVE-2014-0574).