Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 12

• Unscored —
  CVE-2014-3188

  Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and…

  chromium-browser libv8-3.14 Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3189

  The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 d…

  chromium-browser Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3190

  Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google …

  chromium-browser oxide-qt Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3191

  Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause …

  chromium-browser oxide-qt Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3192

  Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.…

  chromium-browser oxide-qt Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3193

  The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.10…

  chromium-browser Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3194

  Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote atta…

  chromium-browser oxide-qt Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3195

  Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3197

  The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google …

  oxide-qt Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3198

  The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.10…

  chromium-browser Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3199

  The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome be…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Oct 8, 2014
• Unscored —
  CVE-2014-3200

  Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Oct 8, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1150848
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1150849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151381
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151422
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151425
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1626.json
• report
  https://access.redhat.com/security/cve/CVE-2014-3188
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3188
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3188
• report
  https://access.redhat.com/security/cve/CVE-2014-3189
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3189
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3189
• report
  https://access.redhat.com/security/cve/CVE-2014-3190
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3190
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3190
• report
  https://access.redhat.com/security/cve/CVE-2014-3191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3191
• report
  https://access.redhat.com/security/cve/CVE-2014-3192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3192
• report
  https://access.redhat.com/security/cve/CVE-2014-3193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3193
• report
  https://access.redhat.com/security/cve/CVE-2014-3194
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3194
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3194
• report
  https://access.redhat.com/security/cve/CVE-2014-3195
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3195
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3195
• report
  https://access.redhat.com/security/cve/CVE-2014-3197
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3197
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3197
• report
  https://access.redhat.com/security/cve/CVE-2014-3198