Debian Security Advisory DSA 2930-1 (chromium-browser - Security Update) Network Vulnerability

Summary

Several vulnerabilties have been discovered in the chromium web browser. CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model implementation. CVE-2014-1742 cloudfuzzer discovered a use-after-free issue in the Blink/Webkit text editing feature.

Solution

For the stable distribution (wheezy), these problems have been fixed in version 34.0.1847.137-1~deb7u1. For the testing distribution (jessie), these problems will be fixed soon. For the unstable distribution (sid), these problems have been fixed in version 34.0.1847.137-1. We recommend that you upgrade your chromium-browser packages.

Insight

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all Internet users to experience the web.

Affected

chromium-browser on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References