USN-2860-1: Oxide vulnerabilities
Ubuntu Security Notice USN-2860-1 11th January, 2016 oxide-qt vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 15.04 Ubuntu 14.04 LTS Summary Several security issues were fixed in Oxide. Software description oxide-qt – Web browser engine library for Qt (QML plugin) Details A race condition was discovered in the MutationObserver implementation inBlink. If a user were tricked in to opening a specially crafted website,an attacker could potentially exploit this to cause a denial of servicevia renderer crash, or execute arbitrary code with the privileges of thesandboxed render process. (CVE-2015-6789) An issue was discovered with the page serializer in Blink. If a user weretricked in to opening a specially crafted website, an attacker couldpotentially exploit this to inject arbitrary script or HTML.(CVE-2015-6790) Multiple security issues were discovered in Chromium. If a user weretricked in to [ more… ]