chromium-browser - security update

Fixed packages 1

Vulnerabilities 23

• Unscored —
  CVE-2015-1302

  The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, whi…

  chromium-browser Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-6764

  The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used…

  nodejs libv8-3.14 Debian Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6765

  Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 al…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6766

  Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attacker…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6767

  Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in …

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6768

  The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy vi…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6769

  The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6770

  The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy vi…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6771

  js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter op…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6772

  The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigat…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6773

  The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row l…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6774

  Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions…

  chromium-browser libv8-3.14 Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6775

  fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which a…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6776

  The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow rem…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6777

  Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/Contai…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6778

  The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6779

  PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remo…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6780

  Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attacker…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6781

  Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6782

  The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6784

  The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6785

  The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) …

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6786

  The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (C…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015