Login
Newsletter
Werbung

Sicherheit: Denial of Service in v8
Aktuelle Meldungen Distributionen
Name: Denial of Service in v8
ID: FEDORA-2014-1671
Distribution: Fedora
Plattformen: Fedora 20
Datum: Mi, 12. Februar 2014, 07:47
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6640
Applikationen: V8

Originalnachricht

Name        : v8
Product : Fedora 20
Version : 3.14.5.10
Release : 4.fc20
URL : http://code.google.com/p/v8
Summary : JavaScript Engine
Description :
V8 is Google's open source JavaScript engine. V8 is written in C++ and is
used
in Google Chrome, the open source browser from Google. V8 implements ECMAScript
as specified in ECMA-262, 3rd edition.

-------------------------------------------------------------------------------
-
Update Information:

2014.01.23, Version 0.10.25 (Stable)

* v8: Fix enumeration for objects with lots of properties

* child_process: fix spawn() optional arguments (Sam Roberts)

* cluster: report more errors to workers (Fedor Indutny)

* domains: exit() only affects active domains (Ryan Graham)

* src: OnFatalError handler must abort() (Timothy J Fontaine)

* stream: writes may return false but forget to emit drain (Yang Tianyang)

2014.01.23, libuv Version 0.10.23 (Stable)

* linux: relax assumption on /proc/stat parsing (Luca Bruno)

* process: close stdio after dup2'ing it (Fedor Indutny)
-------------------------------------------------------------------------------
-
ChangeLog:

* Mon Jan 27 2014 T.C. Hollingsworth <tchollingsworth@gmail.com> -
1:3.14.5.10-4
- backport fix for enumeration for objects with lots of properties
* Fri Dec 13 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> -
1:3.14.5.10-3
- backport fix for out-of-bounds read DoS (RHBZ#1039889; CVE-2013-6640)
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update v8' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung