| Summary: | <www-client/chromium-13.0.782.215: multiple vulnerabilities (CVE-2011-{2823,2824,2825,2826,2827,2828,2829}) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Paweł Hajdan, Jr. (RETIRED) <phajdan.jr> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | chromium |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html | ||
| Whiteboard: | B2 [glsa] | ||
| Package list: | Runtime testing required: | --- | |
|
Description
Paweł Hajdan, Jr. (RETIRED)
2011-08-23 02:46:45 UTC
Arches, please stabilize =www-client/chromium-13.0.782.215 amd64 ok as usual amd64 done. Thanks Agostino x86 done. Thanks Thanks, folks. Added to existing GLSA request. This issue was resolved and addressed in GLSA 201111-01 at http://security.gentoo.org/glsa/glsa-201111-01.xml by GLSA coordinator Alex Legler (a3li). This issue was resolved and addressed in GLSA 201111-01 at http://security.gentoo.org/glsa/glsa-201111-01.xml by GLSA coordinator Alex Legler (a3li). CVE-2011-2829 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2829): Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays. CVE-2011-2828 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2828): Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write. CVE-2011-2827 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2827): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching. CVE-2011-2826 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2826): Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. CVE-2011-2825 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2825): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts. CVE-2011-2824 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2824): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes. CVE-2011-2823 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2823): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box. |