Bugtraq: [SECURITY] [DSA 3594-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512

- ------------------------------------------------------------------------

-

Debian Security Advisory DSA-3594-1 security (at) debian (dot) org [email concealed]

http://ift.tt/1kZ5swi Michael Gilbert

June 04, 2016 http://ift.tt/1S3Txy1

- ------------------------------------------------------------------------

-

Package : chromium-browser

CVE ID : CVE-2016-1696 CVE-2016-1697 CVE-2016-1698 CVE-2016-1699

CVE-2016-1700 CVE-2016-1701 CVE-2016-1702

Several vulnerabilities have been discovered in the chromium web browser.

CVE-2016-1696

A cross-origin bypass was found in the bindings to extensions.

CVE-2016-1697

Mariusz Mlynski discovered a cross-origin bypass in Blink/Webkit.

CVE-2016-1698

Rob Wu discovered an information leak.

CVE-2016-1699

Gregory Panakkal discovered an issue in the Developer Tools

feature.

CVE-2016-1700

Rob Wu discovered a use-after-free issue in extensions.

CVE-2016-1701

Rob Wu discovered a use-after-free issue in the autofill feature.

CVE-2016-1702

cloudfuzzer discovered an out-of-bounds read issue in the skia

library.

For the stable distribution (jessie), these problems have been fixed in

version 51.0.2704.79-1~deb8u1.

For the testing distribution (stretch), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in

version 51.0.2704.79-1.

We recommend that you upgrade your chromium-browser packages.

Further information about Debian Security Advisories, how to apply

these updates to your system and frequently asked questions can be

found at: http://ift.tt/1kZ5swi

Mailing list: debian-security-announce (at) lists.debian (dot) org [email concealed]

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1

iQQcBAEBCgAGBQJXUxfLAAoJELjWss0C1vRzXSYf/07EPiDkG/Xa1dV0Sjq0nQyc

GuqoIrhAXfZpwpl2xlEdgs5u+uYnbCBsbJp/jJtaUoHZxCkqEOBW5v301WOL+mVH

NKEY7cNSiE1siVcyY6Z9+N7n6aEwOLtBgxvEdFueFwzsKK3nMJ5LMRdOmU8yxTjF

dnUOrN242Y0AwGgdtTr2JTbKqjOUV2sIQGv14fUi2wzLIN5OcgVGGVvz/T+wkTLP

cDpmr3NQRTeiXbKKzdMm0UWtGGISbiXYbKPedQDoOctfnqGUyvGquOB0p0NPJWHs

ZhI0dGi7UwWSJ/JXDA3I04Q/uO/5PtCjMrsM5V/4eTTeVDz7Izv/CAVPmYPcb+h5

Pkt3+79dz/Kk5I+brRy7PiYpomP8x2et0eJTnPpI5hzL/U1qO9QWKGv4NklQ1Gt8

N8KN31Wyh3Nzy7Ih6R1vOhomktkkKn9H6/NsLoNX0zyx9JS24Oaqz5OFJF2vEcc2

L8nY+Qerve06JUOOlElnGxSmkq0vxGOTCdhKuto1+KFn0P0cxE7nj2cT0cGBrmud

NYpDavh6/EEEp53o1h+mg5d9quoFGGG06DJMqAzWolzgPi+/93JmcRY5bhL1zKF5

0mwpaVeD61YEcxvvKnNDxSnNJ1ijBAaFzfm3fvtr5XhxEwXlHOnV88tv5Pnad511

rJW0qupuD4p2YYwZp5egtLRmBFLi46qjCRdkpJ+WD7Tj0+ogc9OMRUvGX1QR8HEG

gvabVN2I6tsQh8qGoIWH1w+3MYOvc/FCIjfGRyqPlKtd+XGGShad8UbShI/fvHSP

v96QhMMlBM9bqIWbEYA30oQMHdtj5FJanNesIs3EC6PEygTjcuk2sJkwt8vc4gJk

jXstj1pb65YrReP2rD2YH0WRWRXJDHuGY+h8sw1UjZzCUHuepqHPhFzvxcP7o7br

AkzW85fhaJoiG8WIGn9BMd0X0slYPtagC4/g0RRpGRqyibmJBETAkRdd6WOPhBWm

LvwpmsujfqSVeb1yxU6aRxgz/0YKwzVVN8PvEpeYgKD0FwlsSAa1sjj+GZk2l1GN

6oIvn/oVjvfQlbGYlOPW90xlPDqQG+ujZwjIr08iYZQ1D6aR1tqnxX33L0nSQKFH

lIFgqDANJdDP1xJ/h23rJVa6A+vwGvjGLci+N9C32nn0MEyFBPQp3IypW1++FfMr

kOFmWsSEF9e5rFwZnQBHd69Wfz4n/cisacdQuidXu5KV6qi8xouw6C8Q/Qzk+x4n

JrwxB1rhi8oJfR+r3p8W0RrDOawdBDaVWm0mUD9v1D5vsEhhmYi6wDS2H/qNVYFY

0PFTqTJ4ViszE7w8AJs/9RuhZRKRU4VFbo5B2M4DX6lNt2nvMEcx30JsZZf2uhs=

=fz0n

-----END PGP SIGNATURE-----

[ reply ]

from SecurityFocus Vulnerabilities http://ift.tt/22IjKaC