Apple Safari Multiple Vulnerabilities (HT207600)

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

openSUSE Security Update : Chromium (openSUSE-2017-353)

Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed bsc1028848 : - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CVE-2017-5029: Integer overflow in libxslt...

Security update for Chromium (important)

Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed bsc1028848: - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CVE-2017-5029: Integer overflow in libxslt ...

Debian DSA-3810-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5029 Holger Fuhrmannek discovered an integer overflow issue in the libxslt library. - CVE-2017-5030 Brendon Tiszka discovered a memory corruption issue in the v8 JavaScript library. - CVE-2017-5031 Looben Yang...

[SECURITY] [DSA 3810-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3810-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 15, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3810-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5029 Holger Fuhrmannek discovered an integer overflow issue in the libxslt library. CVE-2017-5030 Brendon Tiszka discovered a memory corruption issue in the v8 javascript library. CVE-2017-5031 Looben Yang discover...

chromium-browser: bypass of content security policy in blink

Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...

CVE-2017-5033

Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

Binary data 9991.pasl...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 57 to the stable channel - 57.0.2987.98 for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 57.0.2987.98 contains a number of fixes and improvements -- a list of changes is available in the log. Watch o...

The vulnerability of Google Chrome browser allows a violator to circumvent content security policies.

The vulnerability of the Blink component in Google Chrome’s browser is related to the inability to enforce necessary content security policies in unsafe-inline. Exploiting this vulnerability allows a malicious actor to bypass content security policies through a specially crafted HTML page...

The vulnerability of Google Chrome browser allows a violator to circumvent content security policies.

The vulnerability of the Blink component in Google Chrome’s browser is related to the inability to enforce necessary content security policies in unsafe-inline. Exploiting this vulnerability allows a malicious actor to bypass content security policies through a specially crafted HTML page...

openSUSE Security Update : chromium (openSUSE-2017-273)

Google chromium was updated to 56.0.2924.87 : - Various small fixes - Disabled option to enable/disable plugins in the chrome://plugins - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2017-02229)

Google Chrome is a Web browser developed by Google, Inc. Blink is a browser layout engine rendering engine jointly developed by Google, Inc. and Norway's OperaSoftware. A security vulnerability exists in Blink in Google Chrome, which arises from the program's failure to enforce the unsafe-inline...

MantisBT < 1.3.1, 2.x < 2.0.0-beta.2 Weak Content Security Policy Vulnerability - Linux

MantisBT is prone to a weak Content Security Policy vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Google Chrome Blink Security Policy Bypass Vulnerability

Google Chrome is a popular web browser. A content security policy bypass vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by users, which can crash applications or execute...

MantisBT < 1.3.1, 2.x < 2.0.0-beta.2 Weak Content Security Policy Vulnerability - Windows

MantisBT is prone to a weak Content Security Policy vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2016-7111

MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2016-7111

MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...