7949e69382
Fixes the following security problems: - CVE-2016-5147: Universal XSS in Blink - CVE-2016-5148: Universal XSS in Blink - CVE-2016-5149: Script injection in extensions - CVE-2016-5150: Use after free in Blink - CVE-2016-5151: Use after free in PDFium - CVE-2016-5152: Heap overflow in PDFium - CVE-2016-5153: Use after destruction in Blink - CVE-2016-5154: Heap overflow in PDFium - CVE-2016-5155: Address bar spoofing - CVE-2016-5156: Use after free in event bindings - CVE-2016-5157: Heap overflow in PDFium - CVE-2016-5158: Heap overflow in PDFium - CVE-2016-5159: Heap overflow in PDFium - CVE-2016-5160: Extensions web accessible resources bypass - CVE-2016-5161: Type confusion in Blink. - CVE-2016-5162: Extensions web accessible resources bypass - CVE-2016-5163: Address bar spoofing - CVE-2016-5164: Universal XSS using DevTools - CVE-2016-5165: Script injection in DevTools - CVE-2016-5166: SMB Relay Attack via Save Page As - CVE-2016-5167: Various fixes from internal audits, fuzzing and other initiatives |
||
|---|---|---|
| .. | ||
| patches | ||
| browser.nix | ||
| common.nix | ||
| default.nix | ||
| plugins.nix | ||
| update.nix | ||
| update.sh | ||
| upstream-info.nix | ||