Description
Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | oxide-qt | 1.8.4-0ubuntu0.14.04.2 | USN-2677-1 |
Advisories 1
- USN-2677-1 oxide-qt vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
References
- http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1329.html
- USN-2677-1 vendor-advisory
- 76174 vdb-entry