MGASA-2015-0265

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0265.html

Import Source

https://advisories.mageia.org/MGASA-2015-0265.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2015-0265

Upstream

Published

2015-07-05T17:22:03Z

Modified

2026-04-16T06:22:37.888819777Z

Summary

Updated chromium-browser package fixes security vulnerability

Details

A scheme validation error in WebUI (CVE-2015-1266).

Two cross-origin bypass issues in Blink (CVE-2015-1267, CVE-2015-1268).

A normalization error in the HSTS/HPKP preload list (CVE-2015-1269).

This update also disables the automatic, silent downloading and installation of "external components" like the hotword extension.

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

43.0.2357.130-1.mga4

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2015-0265.json"

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

43.0.2357.130-1.mga5

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2015-0265.json"