-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3594-1 security@xxxxxxxxxx https://www.debian.org/security/ Michael Gilbert June 04, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : chromium-browser CVE ID : CVE-2016-1696 CVE-2016-1697 CVE-2016-1698 CVE-2016-1699 CVE-2016-1700 CVE-2016-1701 CVE-2016-1702 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1696 A cross-origin bypass was found in the bindings to extensions. CVE-2016-1697 Mariusz Mlynski discovered a cross-origin bypass in Blink/Webkit. CVE-2016-1698 Rob Wu discovered an information leak. CVE-2016-1699 Gregory Panakkal discovered an issue in the Developer Tools feature. CVE-2016-1700 Rob Wu discovered a use-after-free issue in extensions. CVE-2016-1701 Rob Wu discovered a use-after-free issue in the autofill feature. CVE-2016-1702 cloudfuzzer discovered an out-of-bounds read issue in the skia library. For the stable distribution (jessie), these problems have been fixed in version 51.0.2704.79-1~deb8u1. For the testing distribution (stretch), these problems will be fixed soon. For the unstable distribution (sid), these problems have been fixed in version 51.0.2704.79-1. We recommend that you upgrade your chromium-browser packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJXUxfLAAoJELjWss0C1vRzXSYf/07EPiDkG/Xa1dV0Sjq0nQyc GuqoIrhAXfZpwpl2xlEdgs5u+uYnbCBsbJp/jJtaUoHZxCkqEOBW5v301WOL+mVH NKEY7cNSiE1siVcyY6Z9+N7n6aEwOLtBgxvEdFueFwzsKK3nMJ5LMRdOmU8yxTjF dnUOrN242Y0AwGgdtTr2JTbKqjOUV2sIQGv14fUi2wzLIN5OcgVGGVvz/T+wkTLP cDpmr3NQRTeiXbKKzdMm0UWtGGISbiXYbKPedQDoOctfnqGUyvGquOB0p0NPJWHs ZhI0dGi7UwWSJ/JXDA3I04Q/uO/5PtCjMrsM5V/4eTTeVDz7Izv/CAVPmYPcb+h5 Pkt3+79dz/Kk5I+brRy7PiYpomP8x2et0eJTnPpI5hzL/U1qO9QWKGv4NklQ1Gt8 N8KN31Wyh3Nzy7Ih6R1vOhomktkkKn9H6/NsLoNX0zyx9JS24Oaqz5OFJF2vEcc2 L8nY+Qerve06JUOOlElnGxSmkq0vxGOTCdhKuto1+KFn0P0cxE7nj2cT0cGBrmud NYpDavh6/EEEp53o1h+mg5d9quoFGGG06DJMqAzWolzgPi+/93JmcRY5bhL1zKF5 0mwpaVeD61YEcxvvKnNDxSnNJ1ijBAaFzfm3fvtr5XhxEwXlHOnV88tv5Pnad511 rJW0qupuD4p2YYwZp5egtLRmBFLi46qjCRdkpJ+WD7Tj0+ogc9OMRUvGX1QR8HEG gvabVN2I6tsQh8qGoIWH1w+3MYOvc/FCIjfGRyqPlKtd+XGGShad8UbShI/fvHSP v96QhMMlBM9bqIWbEYA30oQMHdtj5FJanNesIs3EC6PEygTjcuk2sJkwt8vc4gJk jXstj1pb65YrReP2rD2YH0WRWRXJDHuGY+h8sw1UjZzCUHuepqHPhFzvxcP7o7br AkzW85fhaJoiG8WIGn9BMd0X0slYPtagC4/g0RRpGRqyibmJBETAkRdd6WOPhBWm LvwpmsujfqSVeb1yxU6aRxgz/0YKwzVVN8PvEpeYgKD0FwlsSAa1sjj+GZk2l1GN 6oIvn/oVjvfQlbGYlOPW90xlPDqQG+ujZwjIr08iYZQ1D6aR1tqnxX33L0nSQKFH lIFgqDANJdDP1xJ/h23rJVa6A+vwGvjGLci+N9C32nn0MEyFBPQp3IypW1++FfMr kOFmWsSEF9e5rFwZnQBHd69Wfz4n/cisacdQuidXu5KV6qi8xouw6C8Q/Qzk+x4n JrwxB1rhi8oJfR+r3p8W0RrDOawdBDaVWm0mUD9v1D5vsEhhmYi6wDS2H/qNVYFY 0PFTqTJ4ViszE7w8AJs/9RuhZRKRU4VFbo5B2M4DX6lNt2nvMEcx30JsZZf2uhs= =fz0n -----END PGP SIGNATURE-----
