-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3683-1 security@debian.org https://www.debian.org/security/ Michael Gilbert October 02, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : chromium-browser CVE ID : CVE-2016-5177 CVE-2016-5178 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5177 A use-after-free issue was discovered in the v8 javascript library. CVE-2016-5178 The chrome development team found and fixed various issues during internal auditing. For the stable distribution (jessie), these problems have been fixed in version 53.0.2785.143-1~deb8u1. For the testing distribution (stretch), these problems will be fixed soon. For the unstable distribution (sid), these problems have been fixed in version 53.0.2785.143-1. We recommend that you upgrade your chromium-browser packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQQcBAEBCgAGBQJX8SQrAAoJELjWss0C1vRz38AgAJp0y7mV6k1o84Tjj6ITZ2nB 8MWzRmG5WgejMk8adv0Z11VSzNEC08JIHtzSv7zmCbasFuwHHfcY0WJgvkOBOr15 szqjIfvxCX1H5TBf29Gf4U2jLkMV0CnfDMSg2V0dQSccXlRPeDreykMc8XG2eIS2 exM6mXPkL9i9cbJ3ORP5oW2Rqo9bmFf7sBPcPaiSRIc7Qk+ZOKfqrDLy13oauIAz vadLOcj5FrTrjeMFSmA81DyXJEsBie1aK35tMVA8dQXQmm1uC5m8khD1yglbiXPd Sv36t63EiaBXBJAimsflE+zxTQNWOntc8gC9G7zsaORfDmmIwyFdiDXNfHu5tUSv hUgfRJP7cP46DR7DRGnLe9uXFRkGiexc2bVW6IijGo1/0rPWXVXq1PKT0226szQz 2AqYvoPd0NpdLKyV5bhRH+Rvhlxq+Li7AoaBGN5DuX3xywZOrUpYgdSka+z2r1QL 9U2PHrLjx1lA7sVR/gLxMfyKAzflPDpo1mF182tJi0W3X76LQIMicGX/AI+CdyEP s3kcF08alGuLv/gONgkfIEpRZ7jTPEeB5k6BARzMYirUHpHmnL5ELIpiU4dLk+W4 Vj/AWY18t0Du8bmGr9wzyDORRElNlTZCkGfM8SylfaZTszfy5D/Jm8UURj8HYP5+ 3JY8nRkdRjEhYLmPQpS9jwwRO6KLVridn3Q6ctme56IFkEjj6a3dkvwQ0QDo5y98 A76pDsl4scOsCuRVEr7aNQf5M/q52wQt95YPjMKBjZn/zS/u4fsdS+bDVlr5zw+d hg4hvMUQobLizYdAIRsCNRC64AG1MxmoDVVYTQpnOolaODOef+05OvIh551wS9WX YAMB/9IXyKOLaySMf9Q6hsR4IjQ3IKreMLLxEzlGHa0j/ctBPHYrOcGD+HPYxP7l vN43AP+IHLecQBYlaqDPQ6m0WjRtJehohUgyI0IViZMzU6V2Jgis7YR1wBk0waeK FNsOcL+hxhozo6k3aAQcnp/b/IoyJGPCGNrVmq3qrPeB0j8fvkDmTeM/HaCyHVIK hpHRKJBCXT+CQ+jrbxGyRCzBDSXJcGgMGnHxnhCSZ6aPoYruQssOTSRCttiElYGC gSHuUAktn8KnOK2RIgmG+gmOSOwcqX+eTuke8MSVs5PgC6wYokf9+ilybhkBdnOG GQq6h+KAM7ifPkBsrq9XFddJlkEyOZDVIyry9nzkuiUMekyB0WCPTHyTdojyDu+p Ldj7YrbMhfEJbircp5kqtH34wBAbRx19CRPcKSYHi/e8xYaFrLPmPmUeB5FGjVp1 K0De2qCyJBWVbAHFMQj/yWse3J1kVfBVv1DKKhN+16Rq2zuQCfz04rE0wATN4iY= =wwWC -----END PGP SIGNATURE-----