{"id":"MGASA-2015-0141","summary":"Updated chromium-browser-stable packages fix security vulnerabilities","details":"Updated chromium-browser-stable packages fix security vulnerabilities:\n\nGoogle Chrome before 41.0.2272.118 does not properly handle the interaction of\nIPC, the Gamepad API, and Google V8, which allows remote attackers to execute\narbitrary code via unspecified vectors (CVE-2015-1233).\n\nRace condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google\nChrome before 41.0.2272.118 allows remote attackers to cause a denial of\nservice (buffer overflow) or possibly have unspecified other impact by\nmanipulating OpenGL ES commands (CVE-2015-1234).\n","modified":"2026-04-16T06:25:24.425075795Z","published":"2015-04-09T22:44:14Z","upstream":["CVE-2015-1233","CVE-2015-1234"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2015-0141.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=15611"},{"type":"WEB","url":"http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html"}],"affected":[{"package":{"name":"chromium-browser-stable","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/chromium-browser-stable?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.2272.118-1.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0141.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}