CVE-2016-5178
chromium-browser: various fixes from internal audits
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), Ubuntu (mittel).
Beschreibung
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 7 | chromium-browser | kein Fix angegeben |
| debian 8 | chromium-browser | 53.0.2785.143-1~deb8u1 |
| ubuntu 14.04 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu0.14.04.1.1142 und 1 weitere |
| ubuntu 16.04 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu0.16.04.1.1254 und 1 weitere |
| ubuntu 16.04-ESM | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu1.1307 und 1 weitere |
Alle 9 Einträge aus 6 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 7 | chromium-browser | kein Fix angegeben |
| debian 8 | chromium-browser | 53.0.2785.143-1~deb8u1 |
| ubuntu 14.04 | chromium-browser | 53.0.2785.143-0ubuntu0.14.04.1.1142 |
| ubuntu 14.04 | oxide-qt | 1.17.9-0ubuntu0.14.04.1 |
| ubuntu 16.04 | chromium-browser | 53.0.2785.143-0ubuntu0.16.04.1.1254 |
| ubuntu 16.04 | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser | 53.0.2785.143-0ubuntu1.1307 |
| ubuntu 16.10 | oxide-qt | 1.17.9-0ubuntu1 |
Referenzen
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2016-2007.html
- http://www.debian.org/security/2016/dsa-3683
- http://www.securityfocus.com/bid/93238
- http://www.securitytracker.com/id/1036970
- https://access.redhat.com/security/cve/CVE-2016-5178
- https://bugs.chromium.org/p/chromium/issues/detail?id=645028
Alle 18 Referenzen
- https://bugs.chromium.org/p/chromium/issues/detail?id=651092
- https://bugzilla.redhat.com/show_bug.cgi?id=1380632
- https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-desktop_29.html
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_29.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FWZVE5PX27FWPLGOPDA7ZC5MILOWN6K/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNUTOWCXLWVXOTGQUS53DSRVTO3J226Z/
- https://nvd.nist.gov/vuln/detail/CVE-2016-5178
- https://security.gentoo.org/glsa/201610-09
- https://ubuntu.com/security/notices/USN-3091-1
- https://www.cve.org/CVERecord?id=CVE-2016-5178