[gentoo-commits] gentoo commit in xml/htdocs/security/en/glsa: glsa-201408-16.xml - gentoo-commits

From:	"Kristian Fiskerstrand (k_f)" <k_f@g.o>
To:	gentoo-commits@l.g.o
Subject:	[gentoo-commits] gentoo commit in xml/htdocs/security/en/glsa: glsa-201408-16.xml
Date:	Sat, 30 Aug 2014 00:35:00
Message-Id:	`20140830003457.65F57436A@oystercatcher.gentoo.org`

1

k_f         14/08/30 00:34:57

2

3

  Added:                glsa-201408-16.xml

4

  Log:

5

  GLSA 201408-16

6

7

Revision  Changes    Path

8

1.1                  xml/htdocs/security/en/glsa/glsa-201408-16.xml

9

10

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201408-16.xml?rev=1.1&view=markup

11

plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201408-16.xml?rev=1.1&content-type=text/plain

12

13

Index: glsa-201408-16.xml

14

===================================================================

15

<?xml version="1.0" encoding="UTF-8"?>

16

<?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?>

17

<?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?>

18

<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">

19

<glsa id="201408-16">

20

  <title>Chromium: Multiple vulnerabilities</title>

21

  <synopsis>Multiple vulnerabilities have been found in Chromium, the worst of

22

    which can allow remote attackers to execute arbitrary code.

23

  </synopsis>

24

  <product type="ebuild">chromium</product>

25

  <announced>August 30, 2014</announced>

26

  <revised>August 30, 2014: 1</revised>

27

  <bug>504328</bug>

28

  <bug>504890</bug>

29

  <bug>507212</bug>

30

  <bug>508788</bug>

31

  <bug>510288</bug>

32

  <bug>510904</bug>

33

  <bug>512944</bug>

34

  <bug>517304</bug>

35

  <bug>519788</bug>

36

  <bug>521276</bug>

37

  <access>remote</access>

38

  <affected>

39

    <package name="www-client/chromium" auto="yes" arch="*">

40

      <unaffected range="ge">37.0.2062.94</unaffected>

41

      <vulnerable range="lt">37.0.2062.94</vulnerable>

42

    </package>

43

  </affected>

44

  <background>

45

    <p>Chromium is an open-source web browser project.</p>

46

  </background>

47

  <description>

48

    <p>Multiple vulnerabilities have been discovered in Chromium. Please review

49

      the CVE identifiers referenced below for details.

50

    </p>

51

  </description>

52

  <impact type="normal">

53

    <p>A remote attacker could conduct a number of attacks which include: cross

54

      site scripting attacks, bypassing of sandbox protection,  potential

55

      execution of arbitrary code with the privileges of the process, or cause

56

      a Denial of Service condition.

57

    </p>

58

  </impact>

59

  <workaround>

60

    <p>There is no known workaround at this time.</p>

61

  </workaround>

62

  <resolution>

63

    <p>All chromium users should upgrade to the latest version:</p>

64

65

    <code>

66

      # emerge --sync

67

      # emerge --ask --oneshot --verbose

68

      "&gt;=www-client/chromium-37.0.2062.94"

69

    </code>

70

71

  </resolution>

72

  <references>

73

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1741">

74

      CVE-2014-1741

75

    </uri>

76

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0538">CVE-2014-0538</uri>

77

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1700">CVE-2014-1700</uri>

78

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1701">CVE-2014-1701</uri>

79

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1702">CVE-2014-1702</uri>

80

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1703">CVE-2014-1703</uri>

81

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1704">CVE-2014-1704</uri>

82

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1705">CVE-2014-1705</uri>

83

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1713">CVE-2014-1713</uri>

84

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1714">CVE-2014-1714</uri>

85

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1715">CVE-2014-1715</uri>

86

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1716">CVE-2014-1716</uri>

87

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1717">CVE-2014-1717</uri>

88

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1718">CVE-2014-1718</uri>

89

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1719">CVE-2014-1719</uri>

90

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1720">CVE-2014-1720</uri>

91

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1721">CVE-2014-1721</uri>

92

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1722">CVE-2014-1722</uri>

93

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1723">CVE-2014-1723</uri>

94

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1724">CVE-2014-1724</uri>

95

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1725">CVE-2014-1725</uri>

96

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1726">CVE-2014-1726</uri>

97

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1727">CVE-2014-1727</uri>

98

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1728">CVE-2014-1728</uri>

99

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1729">CVE-2014-1729</uri>

100

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1730">CVE-2014-1730</uri>

101

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1731">CVE-2014-1731</uri>

102

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1732">CVE-2014-1732</uri>

103

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1733">CVE-2014-1733</uri>

104

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1734">CVE-2014-1734</uri>

105

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1735">CVE-2014-1735</uri>

106

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1740">CVE-2014-1740</uri>

107

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1742">CVE-2014-1742</uri>

108

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1743">CVE-2014-1743</uri>

109

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1744">CVE-2014-1744</uri>

110

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1745">CVE-2014-1745</uri>

111

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1746">CVE-2014-1746</uri>

112

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1747">CVE-2014-1747</uri>

113

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1748">CVE-2014-1748</uri>

114

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1749">CVE-2014-1749</uri>

115

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3154">CVE-2014-3154</uri>

116

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3155">CVE-2014-3155</uri>

117

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3156">CVE-2014-3156</uri>

118

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3157">CVE-2014-3157</uri>

119

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3160">CVE-2014-3160</uri>

120

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3162">CVE-2014-3162</uri>

121

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3165">CVE-2014-3165</uri>

122

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3166">CVE-2014-3166</uri>

123

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3167">CVE-2014-3167</uri>

124

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3168">CVE-2014-3168</uri>

125

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3169">CVE-2014-3169</uri>

126

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3170">CVE-2014-3170</uri>

127

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3171">CVE-2014-3171</uri>

128

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3172">CVE-2014-3172</uri>

129

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3173">CVE-2014-3173</uri>

130

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3174">CVE-2014-3174</uri>

131

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3175">CVE-2014-3175</uri>

132

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3176">CVE-2014-3176</uri>

133

    <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3177">CVE-2014-3177</uri>

134

  </references>

135

  <metadata tag="requester" timestamp="Thu, 20 Mar 2014 12:20:02 +0000">Zlogene</metadata>

136

  <metadata tag="submitter" timestamp="Sat, 30 Aug 2014 00:34:13 +0000">

137

    pinkbyte

138

  </metadata>

139

</glsa>

1	k_f 14/08/30 00:34:57
2
3	Added: glsa-201408-16.xml
4	Log:
5	GLSA 201408-16
6
7	Revision Changes Path
8	1.1 xml/htdocs/security/en/glsa/glsa-201408-16.xml
9
10	file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201408-16.xml?rev=1.1&view=markup
11	plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201408-16.xml?rev=1.1&content-type=text/plain
12
13	Index: glsa-201408-16.xml
14	===================================================================
15	<?xml version="1.0" encoding="UTF-8"?>
16	<?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?>
17	<?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?>
18	<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
19	<glsa id="201408-16">
20	<title>Chromium: Multiple vulnerabilities</title>
21	<synopsis>Multiple vulnerabilities have been found in Chromium, the worst of
22	which can allow remote attackers to execute arbitrary code.
23	</synopsis>
24	<product type="ebuild">chromium</product>
25	<announced>August 30, 2014</announced>
26	<revised>August 30, 2014: 1</revised>
27	<bug>504328</bug>
28	<bug>504890</bug>
29	<bug>507212</bug>
30	<bug>508788</bug>
31	<bug>510288</bug>
32	<bug>510904</bug>
33	<bug>512944</bug>
34	<bug>517304</bug>
35	<bug>519788</bug>
36	<bug>521276</bug>
37	<access>remote</access>
38	<affected>
39	<package name="www-client/chromium" auto="yes" arch="*">
40	<unaffected range="ge">37.0.2062.94</unaffected>
41	<vulnerable range="lt">37.0.2062.94</vulnerable>
42	</package>
43	</affected>
44	<background>
45	<p>Chromium is an open-source web browser project.</p>
46	</background>
47	<description>
48	<p>Multiple vulnerabilities have been discovered in Chromium. Please review
49	the CVE identifiers referenced below for details.
50	</p>
51	</description>
52	<impact type="normal">
53	<p>A remote attacker could conduct a number of attacks which include: cross
54	site scripting attacks, bypassing of sandbox protection, potential
55	execution of arbitrary code with the privileges of the process, or cause
56	a Denial of Service condition.
57	</p>
58	</impact>
59	<workaround>
60	<p>There is no known workaround at this time.</p>
61	</workaround>
62	<resolution>
63	<p>All chromium users should upgrade to the latest version:</p>
64
65	<code>
66	# emerge --sync
67	# emerge --ask --oneshot --verbose
68	">=www-client/chromium-37.0.2062.94"
69	</code>
70
71	</resolution>
72	<references>
73	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1741">
74	CVE-2014-1741
75	</uri>
76	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0538">CVE-2014-0538</uri>
77	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1700">CVE-2014-1700</uri>
78	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1701">CVE-2014-1701</uri>
79	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1702">CVE-2014-1702</uri>
80	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1703">CVE-2014-1703</uri>
81	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1704">CVE-2014-1704</uri>
82	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1705">CVE-2014-1705</uri>
83	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1713">CVE-2014-1713</uri>
84	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1714">CVE-2014-1714</uri>
85	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1715">CVE-2014-1715</uri>
86	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1716">CVE-2014-1716</uri>
87	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1717">CVE-2014-1717</uri>
88	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1718">CVE-2014-1718</uri>
89	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1719">CVE-2014-1719</uri>
90	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1720">CVE-2014-1720</uri>
91	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1721">CVE-2014-1721</uri>
92	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1722">CVE-2014-1722</uri>
93	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1723">CVE-2014-1723</uri>
94	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1724">CVE-2014-1724</uri>
95	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1725">CVE-2014-1725</uri>
96	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1726">CVE-2014-1726</uri>
97	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1727">CVE-2014-1727</uri>
98	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1728">CVE-2014-1728</uri>
99	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1729">CVE-2014-1729</uri>
100	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1730">CVE-2014-1730</uri>
101	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1731">CVE-2014-1731</uri>
102	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1732">CVE-2014-1732</uri>
103	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1733">CVE-2014-1733</uri>
104	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1734">CVE-2014-1734</uri>
105	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1735">CVE-2014-1735</uri>
106	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1740">CVE-2014-1740</uri>
107	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1742">CVE-2014-1742</uri>
108	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1743">CVE-2014-1743</uri>
109	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1744">CVE-2014-1744</uri>
110	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1745">CVE-2014-1745</uri>
111	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1746">CVE-2014-1746</uri>
112	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1747">CVE-2014-1747</uri>
113	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1748">CVE-2014-1748</uri>
114	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1749">CVE-2014-1749</uri>
115	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3154">CVE-2014-3154</uri>
116	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3155">CVE-2014-3155</uri>
117	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3156">CVE-2014-3156</uri>
118	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3157">CVE-2014-3157</uri>
119	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3160">CVE-2014-3160</uri>
120	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3162">CVE-2014-3162</uri>
121	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3165">CVE-2014-3165</uri>
122	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3166">CVE-2014-3166</uri>
123	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3167">CVE-2014-3167</uri>
124	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3168">CVE-2014-3168</uri>
125	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3169">CVE-2014-3169</uri>
126	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3170">CVE-2014-3170</uri>
127	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3171">CVE-2014-3171</uri>
128	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3172">CVE-2014-3172</uri>
129	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3173">CVE-2014-3173</uri>
130	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3174">CVE-2014-3174</uri>
131	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3175">CVE-2014-3175</uri>
132	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3176">CVE-2014-3176</uri>
133	<uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3177">CVE-2014-3177</uri>
134	</references>
135	<metadata tag="requester" timestamp="Thu, 20 Mar 2014 12:20:02 +0000">Zlogene</metadata>
136	<metadata tag="submitter" timestamp="Sat, 30 Aug 2014 00:34:13 +0000">
137	pinkbyte
138	</metadata>
139	</glsa>

Gentoo Archives: gentoo-commits