Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 16.04: USN-3016-1 Severe Oxide-Qt Software Failures

ubuntu
Calendar Grey June 30, 2016
Scroller Ubuntu
Security flaws in Oxide-qt patched for Ubuntu versions 16.04, 15.10, and 14.04. Discover strategies to enhance your system's protection.
Several security issues were fixed in Oxide.

Summary

Several security issues were fixed in Oxide.

Software Description:

- oxide-qt: Web browser engine for Qt (QML plugin)

Details:

Multiple security issues were discovered in Chromium. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to read uninitialized memory, cause a denial

of service via application crash, or execute arbitrary code.

(CVE-2016-1704)

Topics%20covered

Topics Covered

security advisory denial of service update critical application crash ubuntu oxide-qt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  liboxideqtcore0                 1.15.8-0ubuntu0.16.04.1

Ubuntu 15.10:
  liboxideqtcore0                 1.15.8-0ubuntu0.15.10.1

Ubuntu 14.04 LTS:
  liboxideqtcore0                 1.15.8-0ubuntu0.14.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3015-1

CVE-2016-1704

Severity
important
Lowest
Low
Medium
High
Critical

June 30, 2016

Topics%20covered

Topics Covered

security advisory denial of service update critical application crash ubuntu oxide-qt

Package Information

https://launchpad.net/ubuntu/+source/oxide-qt/1.15.8-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.15.8-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.15.8-0ubuntu0.14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.