Vai al contenuto principale

Alert GCSA-11068 - Vulnerabilita' in Google Chrome


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

      Alert ID : GCSA-11068
          Data : 23 Settembre 2011
        Titolo : Vulnerabilita' in Google Chrome

******************************************************************

:: Descrizione del problema

    Google ha rilasciato una nuova versione del browser Chrome.
    Questo aggiornamento risolve 15 vulnerabilita' gravi,
    10 medie e 7 a basso rischio.

    Per una descrizione completa delle vulnerabilita' si rimanda
    alla sezione "Riferimenti".


:: Software interessato

    Google Chrome versioni precedenti alla 14.0.835.163

:: Impatto

    Security Bypass
    Accesso al sistema
    Possibile compromissione del sistema


:: Soluzioni

    Aggiornare Google Chrome alla versione 14.0.835.163

    L'aggiornamento sara' automatico per tutte le installazioni
    in cui non sia stato disattivata l'opzione "aggiornamento
    automatico".

    Per l'installazione manuale scaricare il software dal sito
    ufficiale:

    http://www.google.com/chrome/?hl=it


:: Riferimenti

    Google Chrome Advisory
    http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html

    Secunia
    http://secunia.com/advisories/46049/

    Mitre CVE
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2834
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2835
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2836
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2837
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2838
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2839
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2840
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2841
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2842
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2843
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2844
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2846
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2847
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2848
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2849
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2850
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2851
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2852
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2853
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2854
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2855
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2856
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2857
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2858
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2859
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2860
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2861
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2862
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2864
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2874
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2875
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3234


-----BEGIN PGP SIGNATURE-----

iQCVAwUBTnyW3fOB+SpikaiRAQJS1gP/d/DnQgvv8ZP3Ss9chP7ZZohsMsmh5w42
VE1zSs0UZF0ipfBajsTb6yiuY/NDH/x0S3C/BeuhO1MppYwYGwhuonfDUzjfWA8F
md9iJyR1HIaOIwdKWrljJR5SFtvDjoIH+nb6SNJMfcD68GOXZgvfehjNDkhx/5PS
myEWplnbpSI=
=Gvmv
-----END PGP SIGNATURE-----

 

Alert di GARR-CERT Usata per la segnalazione di allarmi di sicurezza e comunicazioni di interesse generale diretti agli enti GARR. L'iscrizione è aperta e consigliata a tutti, il posting è riservato ai membri di GARR-CERT