Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 16.04 LTS: USN-5092-1 Critical: Glibc Memory Leak Issues

ubuntu
Calendar Grey October 7, 2016
Scroller Ubuntu
Get informed on the Oxide security weaknesses found in Ubuntu and discover effective strategies to fortify your system against possible threats.
Several security issues were fixed in Oxide.

Summary

Several security issues were fixed in Oxide.

Software Description:

- oxide-qt: Web browser engine for Qt (QML plugin)

Details:

A use-after-free was discovered in the V8 bindings in Blink. If a user

were tricked in to opening a specially crafted website, an attacker could

potentially exploit this to cause a denial of service via application

crash, or execute arbitrary code. (CVE-2016-5170)

A use-after-free was discovered in the V8 bindings in Blink. If a user

were tricked in to opening a specially crafted website, an attacker could

potentially exploit this to cause a denial of service via application

crash, or execute arbitrary code. (CVE-2016-5171)

An issue was discovered in V8. If a user were tricked in to opening a

specially crafted website, an attacker could potentially exploit this to

ontain sensitive information from arbitrary memory locations.

(CVE-2016-5172)

Multiple security issues were discovered in Chromium. If a user were

tricked in to openi...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu application crash use-after-free oxide-qt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  liboxideqtcore0                 1.17.9-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  liboxideqtcore0                 1.17.9-0ubuntu0.14.04.1

In general, a standard system update will make all the necessary changes.

References

CVE-2016-5170, CVE-2016-5171, CVE-2016-5172, CVE-2016-5175,

CVE-2016-5177, CVE-2016-5178, CVE-2016-7549

Severity
critical
Lowest
Low
Medium
High
Critical

October 07, 2016

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu application crash use-after-free oxide-qt

Package Information

https://launchpad.net/ubuntu/+source/oxide-qt/1.17.9-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.17.9-0ubuntu0.14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.