Red Hat Bugzilla – Bug 1077136
CVE-2014-1704 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149
Last modified: 2017-09-08 08:08:19 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-1704 to the following vulnerability: Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. http://googlechromereleases.blogspot.com/2014/03/stable-channel-update_11.html https://code.google.com/p/chromium/issues/detail?id=328202 https://code.google.com/p/v8/source/detail?r=18564 https://code.google.com/p/chromium/issues/detail?id=345715 https://code.google.com/p/v8/source/detail?r=19614 https://code.google.com/p/chromium/issues/detail?id=349079 https://code.google.com/p/v8/source/detail?r=19668
Created v8 tracking bugs for this issue: Affects: fedora-all [bug 1077137] Affects: epel-6 [bug 1077138]
(In reply to Murray McAllister from comment #0) > Reference: https://code.google.com/p/v8/source/detail?r=18564 Will backport this one. > Reference: https://code.google.com/p/v8/source/detail?r=19614 > Reference: https://code.google.com/p/v8/source/detail?r=19668 These both involve operations with smis (which is v8 parlance for "small integers", something more commonly known to programmers as "fixnums") that aren't present in v8 3.14.
v8-3.14.5.10-7.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
v8-3.14.5.10-7.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
v8-3.14.5.10-7.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.
Statement: Red Hat Product Security has rated this issue as having Low security impact in Red Hat Enterprise Linux OpenStack Platform. This issue is not currently planned to be addressed in a future security update.
This issue has been addressed in the following products: Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 Via RHSA-2014:1744 https://rhn.redhat.com/errata/RHSA-2014-1744.html