USN-2757-1 — oxide-qt vulnerabilities

Summary

Two security issues were discovered in Blink and V8. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same-origin restrictions.
(CVE-2015-1303, CVE-2015-1304)

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	oxide-qt	1.9.5-0ubuntu0.14.04.1

Vulnerabilities 2

Unscored —

CVE-2015-1303

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow act…

chromium-browser oxide-qt Ubuntu

Oct 12, 2015
Unscored —

CVE-2015-1304

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls …

chromium-browser oxide-qt libv8-3.14 Ubuntu

Oct 12, 2015

References

report
https://ubuntu.com/security/CVE-2015-1303
report
https://ubuntu.com/security/CVE-2015-1304

oxide-qt vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow act…

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls …

References