File _patchinfo of Package patchinfo
<patchinfo incident="7428">
<issue id="1064066" tracker="bnc">VUL-0: chromium: tacker bug Oct/2017</issue>
<issue id="2017-15386" tracker="cve" />
<issue id="2017-5128" tracker="cve" />
<issue id="2017-5129" tracker="cve" />
<issue id="2017-5131" tracker="cve" />
<issue id="2017-5130" tracker="cve" />
<issue id="2017-5133" tracker="cve" />
<issue id="2017-5132" tracker="cve" />
<issue id="2017-5126" tracker="cve" />
<issue id="2017-5127" tracker="cve" />
<issue id="2017-5125" tracker="cve" />
<issue id="2017-15387" tracker="cve" />
<issue id="2017-15388" tracker="cve" />
<issue id="2017-15389" tracker="cve" />
<issue id="2017-5124" tracker="cve" />
<issue id="2017-15391" tracker="cve" />
<issue id="2017-15390" tracker="cve" />
<issue id="2017-15393" tracker="cve" />
<issue id="2017-15392" tracker="cve" />
<issue id="2017-15395" tracker="cve" />
<issue id="2017-15394" tracker="cve" />
<issue tracker="bnc" id="1065405" />
<issue id="2017-15396" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>AndreasStieger</packager>
<description>This update to Chromium 62.0.3202.75 fixes the following security issues:
- CVE-2017-5124: UXSS with MHTML
- CVE-2017-5125: Heap overflow in Skia
- CVE-2017-5126: Use after free in PDFium
- CVE-2017-5127: Use after free in PDFium
- CVE-2017-5128: Heap overflow in WebGL
- CVE-2017-5129: Use after free in WebAudio
- CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
- CVE-2017-5130: Heap overflow in libxml2
- CVE-2017-5131: Out of bounds write in Skia
- CVE-2017-5133: Out of bounds write in Skia
- CVE-2017-15386: UI spoofing in Blink
- CVE-2017-15387: Content security bypass
- CVE-2017-15388: Out of bounds read in Skia
- CVE-2017-15389: URL spoofing in OmniBox
- CVE-2017-15390: URL spoofing in OmniBox
- CVE-2017-15391: Extension limitation bypass in Extensions.
- CVE-2017-15392: Incorrect registry key handling in PlatformIntegration
- CVE-2017-15393: Referrer leak in Devtools
- CVE-2017-15394: URL spoofing in extensions UI
- CVE-2017-15395: Null pointer dereference in ImageCapture
- CVE-2017-15396: Stack overflow in V8
</description>
<summary>Security update for chromium</summary>
</patchinfo>