DSA-2905-1: Chromium-Browser Security Update
Summary
DSA-2905-1: chromium-browser - security update. Affects chromium-browser versions < 34.0.1847.116-1~deb7u1. Fixed in 34.0.1847.116-1~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium-Browser is a web browser developed by Google and is the open-source version of Google Chrome. It provides users with a fast and secure browsing experience, utilizing the Blink rendering engine. However, several vulnerabilities have been discovered in the Chromium-Browser, which could potentially compromise user security and privacy.
Vulnerability Detail
The following vulnerabilities have been identified in the Chromium-Browser:
- CVE-2014-1716: A cross-site scripting issue in the v8 javascript library.
- CVE-2014-1717: An out-of-bounds read issue in the v8 javascript library.
- CVE-2014-1718: An integer overflow issue in chromium's software compositor.
- CVE-2014-1719: A use-after-free issue in the web workers implementation.
- CVE-2014-1720: A use-after-free issue in the Blink/Webkit document object model implementation.
- CVE-2014-1721: A memory corruption issue in the v8 javascript library.
- CVE-2014-1722: A use-after-free issue in block rendering.
- CVE-2014-1723: A URL spoofing issue.
- CVE-2014-1724: A use-after-free issue in freebsoft's libspeechd library.
- CVE-2014-1725: An out-of-bounds read in the base64 implementation.
- CVE-2014-1726: A bypass of the same origin policy.
- CVE-2014-1727: A use-after-free issue in the web color chooser implementation.
- CVE-2014-1728: Multiple issues with potential security impact discovered and fixed by the Google Chrome development team.
- CVE-2014-1729: Multiple issues in the v8 javascript library version 3.24.35.22.
These vulnerabilities could allow attackers to execute arbitrary code, bypass security restrictions, or cause denial of service.
How To Fix
Minimum fixed version
34.0.1847.116-1~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromium-browserTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities.
Conclusion
Upgrading your chromium-browser packages to the recommended version is crucial to mitigate the risks associated with these vulnerabilities. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for chromium-browser →
FAQ
These vulnerabilities could potentially allow attackers to execute arbitrary code, bypass security restrictions, or cause denial of service.
To fix these vulnerabilities, it is recommended to upgrade your chromium-browser packages to the latest version available for your distribution.
No specific workarounds have been mentioned for these vulnerabilities.
There is no information provided regarding known exploitation of these vulnerabilities.
You can find more information about these vulnerabilities in the Debian Security Advisory DSA-2905-1.
Related vulnerabilities
Recent vulnerabilities recorded for chromium-browser.
