PublicDateAtUSN: 2016-09-25
Candidate: CVE-2016-5172
PublicDate: 2016-09-25 20:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5172
 https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
 https://ubuntu.com/security/notices/USN-3091-1
Description:
 The parser in Google V8, as used in Google Chrome before 53.0.2785.113,
 mishandles scopes, which allows remote attackers to obtain sensitive
 information from arbitrary memory locations via crafted JavaScript code.
Ubuntu-Description:
Notes:
Bugs:
 https://crbug.com/616386
Priority: medium
Discovered-by: Choongwoo Han
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM]

Patches_chromium-browser:
upstream_chromium-browser: released (53.0.2785.113)
precise_chromium-browser: ignored
trusty_chromium-browser: released (53.0.2785.143-0ubuntu0.14.04.1.1142)
trusty/esm_chromium-browser: DNE (trusty was released [53.0.2785.143-0ubuntu0.14.04.1.1142])
vivid/ubuntu-core_chromium-browser: DNE
vivid/stable-phone-overlay_chromium-browser: DNE
xenial_chromium-browser: released (53.0.2785.143-0ubuntu0.16.04.1.1254)
yakkety_chromium-browser: released (53.0.2785.143-0ubuntu1.1307)
devel_chromium-browser: released (53.0.2785.143-0ubuntu1.1307)

Patches_oxide-qt:
upstream_oxide-qt: released (1.17.8)
precise_oxide-qt: DNE
trusty_oxide-qt: released (1.17.9-0ubuntu0.14.04.1)
trusty/esm_oxide-qt: DNE (trusty was released [1.17.9-0ubuntu0.14.04.1])
vivid/ubuntu-core_oxide-qt: DNE
vivid/stable-phone-overlay_oxide-qt: released (1.17.9-0ubuntu0.15.04.1~overlay2)
xenial_oxide-qt: released (1.17.9-0ubuntu0.16.04.1)
esm-infra/xenial_oxide-qt: released (1.17.9-0ubuntu0.16.04.1)
yakkety_oxide-qt: released (1.17.9-0ubuntu1)
devel_oxide-qt: released (1.17.9-0ubuntu1)