CVE-2016-5178
chromium-browser: various fixes from internal audits
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), Ubuntu (medium).
Description
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 7 | chromium-browser | no fix listed |
| debian 8 | chromium-browser | 53.0.2785.143-1~deb8u1 |
| ubuntu 14.04 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu0.14.04.1.1142 and 1 more |
| ubuntu 16.04 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu0.16.04.1.1254 and 1 more |
| ubuntu 16.04-ESM | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu1.1307 and 1 more |
Show all 9 entries from 6 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 7 | chromium-browser | no fix listed |
| debian 8 | chromium-browser | 53.0.2785.143-1~deb8u1 |
| ubuntu 14.04 | chromium-browser | 53.0.2785.143-0ubuntu0.14.04.1.1142 |
| ubuntu 14.04 | oxide-qt | 1.17.9-0ubuntu0.14.04.1 |
| ubuntu 16.04 | chromium-browser | 53.0.2785.143-0ubuntu0.16.04.1.1254 |
| ubuntu 16.04 | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser | 53.0.2785.143-0ubuntu1.1307 |
| ubuntu 16.10 | oxide-qt | 1.17.9-0ubuntu1 |
References
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2016-2007.html
- http://www.debian.org/security/2016/dsa-3683
- http://www.securityfocus.com/bid/93238
- http://www.securitytracker.com/id/1036970
- https://access.redhat.com/security/cve/CVE-2016-5178
- https://bugs.chromium.org/p/chromium/issues/detail?id=645028
All 18 references
- https://bugs.chromium.org/p/chromium/issues/detail?id=651092
- https://bugzilla.redhat.com/show_bug.cgi?id=1380632
- https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-desktop_29.html
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_29.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FWZVE5PX27FWPLGOPDA7ZC5MILOWN6K/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNUTOWCXLWVXOTGQUS53DSRVTO3J226Z/
- https://nvd.nist.gov/vuln/detail/CVE-2016-5178
- https://security.gentoo.org/glsa/201610-09
- https://ubuntu.com/security/notices/USN-3091-1
- https://www.cve.org/CVERecord?id=CVE-2016-5178