Issued:
2017-04-05
Updated:
2017-04-05

RHSA-2017:0879 - Moderate: v8 security update

Synopsis

Moderate: v8 security update

Type/Severity

Security Advisory Moderate

Topic

An update for v8 is now available for Red Hat OpenStack Platform 8.0 (Liberty).

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

V8 is Google's open source JavaScript engine. V8 is written in C++ and is used in Google Chrome, the open source browser from Google. V8 implements ECMAScript as specified in ECMA-262, 3rd edition.

Security Fix(es):

  • An integer-overflow flaw was found in V8's Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges. (CVE-2016-1669)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat OpenStack8x86_64

Updated Packages

  • v8-debuginfo-3.14.5.10-19.el7ost.x86_64.rpm
  • v8-3.14.5.10-19.el7ost.src.rpm
  • v8-3.14.5.10-19.el7ost.x86_64.rpm

Fixes

CVEs

References

Additional information