Discover Government News

=========================================================================Ubuntu Security Notice USN-3236-1
March 29, 2017

oxide-qt vulnerabilities
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Oxide.

Software Description:
- oxide-qt: Web browser engine for Qt (QML plugin)

Details:

Multiple vulnerabilities were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to obtain sensitive information, spoof
application UI by causing the security status API or webview URL to
indicate the wrong values, bypass security restrictions, cause a denial
of service via application crash, or execute arbitrary code.
(CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,
CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044,
CVE-2017-5045, CVE-2017-5046)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  liboxideqtcore0                 1.21.5-0ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  liboxideqtcore0                 1.21.5-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  liboxideqtcore0                 1.21.5-0ubuntu0.14.04.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-3236-1
  CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,
  CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041,
  CVE-2017-5044, CVE-2017-5045, CVE-2017-5046

Package Information:
  https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.16.10.1
  https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.16.04.1
  https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.14.04.1


Ubuntu 3236-1: Oxide vulnerabilities

March 29, 2017
Several security issues were fixed in Oxide.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.10: liboxideqtcore0 1.21.5-0ubuntu0.16.10.1 Ubuntu 16.04 LTS: liboxideqtcore0 1.21.5-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: liboxideqtcore0 1.21.5-0ubuntu0.14.04.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3236-1

CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,

CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041,

CVE-2017-5044, CVE-2017-5045, CVE-2017-5046

Severity
March 29, 2017

Package Information

https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.16.10.1 https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.16.04.1 https://launchpad.net/ubuntu/+source/oxide-qt/1.21.5-0ubuntu0.14.04.1

Related News