Mageia alert MGASA-2016-0279 (chromium-browser-stable)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2016-0279: Updated chromium-browser-stable packages fix security vulnerability 
Date:
    	     
 
Tue, 9 Aug 2016 10:59:11 +0200
Message-ID:
    	     
 
<20160809085911.BA8CD9F769@duvel.mageia.org>
MGASA-2016-0279 - Updated chromium-browser-stable packages fix security vulnerability

Publication date: 09 Aug 2016
URL: http://advisories.mageia.org/MGASA-2016-0279.html
Type: security
Affected Mageia releases: 5
CVE: CVE-2016-5139,
     CVE-2016-5140,
     CVE-2016-5141,
     CVE-2016-5142,
     CVE-2016-5143,
     CVE-2016-5144,
     CVE-2016-5145,
     CVE-2016-5146

Description:
Chromium-browser-stable 52.0.2743.116 fixes security issues: two heap
overflow issues in pdfium (CVE-2016-5139 and CVE-2016-5140); an address
bar spoofing problem (CVE-2016-5141); a use-after-free bug (CVE-2016-5142)
and a same origin bypass problem (CVE-2016-5145) in blink; two parameter
sanitization failures in DevTools (CVE-2016-5143 and CVE-2016-5144); and
various fixes from upstream's internal audits, fuzzing, and other
initiatives (CVE-2016-5146).

References:
- https://bugs.mageia.org/show_bug.cgi?id=19134
- http://googlechromereleases.blogspot.com/2016/08/stable-c...
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5139
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5140
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5141
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5142
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5143
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5144
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5145
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5146

SRPMS:
- 5/core/chromium-browser-stable-52.0.2743.116-1.mga5