chromium-browser - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2016-1622

  The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1623

  The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from oc…

  chromium-browser oxide-qt Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1624

  Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48…

  chromium-browser oxide-qt brotli brotli Debian Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1625

  The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation t…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1626

  The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, mis…

  chromium-browser openjpeg2 Debian Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1627

  The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and en…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1628

  pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value,…

  chromium-browser openjpeg2 Debian Ubuntu
  Feb 21, 2016
• Unscored —
  CVE-2016-1629

  Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protect…

  chromium-browser oxide-qt Ubuntu
  Feb 21, 2016