oxide-qt vulnerabilities

Related Vulnerabilities: CVE-2017-5029   CVE-2017-5030   CVE-2017-5031   CVE-2017-5033   CVE-2017-5035   CVE-2017-5037   CVE-2017-5040   CVE-2017-5041   CVE-2017-5044   CVE-2017-5045   CVE-2017-5046  

Several security issues were fixed in Oxide.

Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, spoof application UI by causing the security status API or webview URL to indicate the wrong values, bypass security restrictions, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033, CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044, CVE-2017-5045, CVE-2017-5046)

29 March 2017

oxide-qt vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 16.10
  • Ubuntu 16.04 LTS
  • Ubuntu 14.04 LTS

Summary

Several security issues were fixed in Oxide.

Software Description

  • oxide-qt - Web browser engine for Qt (QML plugin)

Details

Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, spoof application UI by causing the security status API or webview URL to indicate the wrong values, bypass security restrictions, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033, CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044, CVE-2017-5045, CVE-2017-5046)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.10
liboxideqtcore0 - 1.21.5-0ubuntu0.16.10.1
Ubuntu 16.04 LTS
liboxideqtcore0 - 1.21.5-0ubuntu0.16.04.1
Ubuntu 14.04 LTS
liboxideqtcore0 - 1.21.5-0ubuntu0.14.04.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References