[IT-SecNots] [SECURITY] [DSA 3683-1] chromium-browser security update

[Michael Gilbert <mgilbert AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3683-1                   security AT debian.org
https://www.debian.org/security/                          Michael Gilbert
October 02, 2016                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : chromium-browser
CVE ID         : CVE-2016-5177 CVE-2016-5178

Several vulnerabilities have been discovered in the chromium web browser.

CVE-2016-5177

    A use-after-free issue was discovered in the v8 javascript library.

CVE-2016-5178

    The chrome development team found and fixed various issues during
    internal auditing.

For the stable distribution (jessie), these problems have been fixed in
version 53.0.2785.143-1~deb8u1.

For the testing distribution (stretch), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
version 53.0.2785.143-1.

We recommend that you upgrade your chromium-browser packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=
=wwWC
-----END PGP SIGNATURE-----