Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 15.10 USN-2860-1 Important Oxide-qt Denial of Service Advisory

ubuntu
Calendar Grey January 11, 2016
Scroller Ubuntu
Remediation for Oxide security flaws encompasses essential patches and protective protocols. Safeguard your infrastructure against potential threats.
Several security issues were fixed in Oxide.

Summary

Several security issues were fixed in Oxide.

Software Description:

- oxide-qt: Web browser engine library for Qt (QML plugin)

Details:

A race condition was discovered in the MutationObserver implementation in

Blink. If a user were tricked in to opening a specially crafted website,

an attacker could potentially exploit this to cause a denial of service

via renderer crash, or execute arbitrary code with the privileges of the

sandboxed render process. (CVE-2015-6789)

An issue was discovered with the page serializer in Blink. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit this to inject arbitrary script or HTML.

(CVE-2015-6790)

Multiple security issues were discovered in Chromium. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to read uninitialized memory, cause a denial

of service via application crash or execute arbitrary code with the

pr...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory software update arbitrary code execution Ubuntu race condition Denial of Service Oxide

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  liboxideqtcore0                 1.11.4-0ubuntu0.15.10.1

Ubuntu 15.04:
  liboxideqtcore0                 1.11.4-0ubuntu0.15.04.1

Ubuntu 14.04 LTS:
  liboxideqtcore0                 1.11.4-0ubuntu0.14.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2860-1

CVE-2015-6789, CVE-2015-6790, CVE-2015-6791, CVE-2015-8548,

CVE-2015-8664

Severity
important
Lowest
Low
Medium
High
Critical

January 11, 2016

Topics%20covered

Topics Covered

security advisory software update arbitrary code execution Ubuntu race condition Denial of Service Oxide

Package Information

https://launchpad.net/ubuntu/+source/oxide-qt/1.11.4-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.11.4-0ubuntu0.15.04.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.11.4-0ubuntu0.14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.