PublicDateAtUSN: 2016-03-05
Candidate: CVE-2016-2844
PublicDate: 2016-03-06 02:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2844
 https://codereview.chromium.org/1423573002
 https://code.google.com/p/chromium/issues/detail?id=591402
 https://bugs.chromium.org/p/chromium/issues/detail?id=546849
 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
 https://ubuntu.com/security/notices/USN-2920-1
Description:
 WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google
 Chrome before 49.0.2623.75, does not properly determine when anonymous
 block wrappers may exist, which allows remote attackers to cause a denial
 of service (incorrect cast and assertion failure) or possibly have
 unspecified other impact via crafted JavaScript code.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]

Patches_chromium-browser:
upstream_chromium-browser: released (49.0.2623.75)
precise_chromium-browser: ignored
trusty_chromium-browser: released (49.0.2623.87-0ubuntu0.14.04.1.1112)
trusty/esm_chromium-browser: DNE (trusty was released [49.0.2623.87-0ubuntu0.14.04.1.1112])
vivid/ubuntu-core_chromium-browser: DNE
vivid/stable-phone-overlay_chromium-browser: DNE
wily_chromium-browser: released (49.0.2623.87-0ubuntu0.15.10.1.1222)
devel_chromium-browser: released (49.0.2623.87-0ubuntu1.1232)

Patches_oxide-qt:
upstream_oxide-qt: released (1.13.6)
precise_oxide-qt: DNE
trusty_oxide-qt: released (1.13.6-0ubuntu0.14.04.1)
trusty/esm_oxide-qt: DNE (trusty was released [1.13.6-0ubuntu0.14.04.1])
vivid/ubuntu-core_oxide-qt: DNE
vivid/stable-phone-overlay_oxide-qt: released (1.13.6-0ubuntu0.15.04.1~overlay1)
wily_oxide-qt: released (1.13.6-0ubuntu0.15.10.1)
devel_oxide-qt: released (1.13.6-0ubuntu1)