Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sts.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - https://codereview.chromium.org/1684953002 - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://code.google.com/p/chromium/issues/detail?id=585268 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1636 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.ope
m Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - https://codereview.chromium.org/1713093002 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://code.google.com/p/chromium/issues/detail?id=584155 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/20
/p/chromium/issues/detail?id=584155 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1637 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/securit
pensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - https://code.google.com/p/chromium/issues/detail?id=555544 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1506913002 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1638 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=585282 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html -
-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1744623002 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1639 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-securi
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - https://codereview.chromium.org/1703733002 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - https://code.google.com/p/chromium/issues/detail?id=572224 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1640 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user's next navigation target via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-secur
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - https://codereview.chromium.org/1496033003 - https://codereview.chromium.org/1554233005 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://code.google.com/p/chromium/issues/detail?id=550047 - http://googlechromereleases.blogspot.com/2016/03/stable-chann
tps://code.google.com/p/chromium/issues/detail?id=550047 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1641 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1730363003 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.
iew.chromium.org/1730363003 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - https://code.google.com/p/chromium/issues/detail?id=583718 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1642 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=563964 - https://bugs.chromium.org/p/chromium/issues/detail?id=582707 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securi
e/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - https://bugs.chromium.org/p/chromium/issues/detail?id=565416 - http://www.securitytracker.com/id/1035185 - https://bugs.chromium.org/p/chromium/issues/detail?id=472147 - https://bugs.chromium.org/p/chromium/issues/detail?id=582697 - https://code.google.com/p/chromium/issues/detail?id=591402 - https://bugs.chromium.org/p/chromium/issues/detail?id=582701 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html
se-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://bugs.chromium.org/p/chromium/issues/detail?id=565424 - https://bugs.chromium.org/p/chromium/issues/detail?id=582470 - https://bugs.chromium.org/p/chromium/issues/detail?id=589186 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1643 State: PUBLISHED Published: 2016-03-13T22:00:00 Last Updated: 2024-08-05T23:02:12.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035259 - https://code.google.com/p/chromium/issues/detail?id=589838 - http:
rences: - http://www.securitytracker.com/id/1035259 - https://code.google.com/p/chromium/issues/detail?id=589838 - http://www.debian.org/security/2016/dsa-3513 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html - http://www.securityfocus.com/bid/84224 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html - http://www.ubuntu.com/usn/USN-2920-1 - https://codereview.chromium.org/1732753004
CVE ID: CVE-2016-1644 State: PUBLISHED Published: 2016-03-13T22:00:00 Last Updated: 2024-08-05T23:02:12.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035259 - http://www.debian.org/security/2016/dsa-3513 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html - http:
w.debian.org/security/2016/dsa-3513 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html - https://code.google.com/p/chromium/issues/detail?id=590620 - https://codereview.chromium.org/1755543002 - http://www.securityfocus.com/bid/84224 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html - http://www.ubuntu.com/usn/USN-2920-1
CVE ID: CVE-2016-1645 State: PUBLISHED Published: 2016-03-13T22:00:00 Last Updated: 2024-08-05T23:02:12.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035259 - http://www.zerodayinitiative.com/advisories/ZDI-16-197/ - http://www.debian.org/security/2016/dsa-3513 -
m/id/1035259 - http://www.zerodayinitiative.com/advisories/ZDI-16-197/ - http://www.debian.org/security/2016/dsa-3513 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html - https://code.google.com/p/chromium/issues/detail?id=587227 - http://www.securityfocus.com/bid/84224 - https://pdfium.googlesource.com/pdfium/+/c145aeb2bf13ac408fc3e8233acca43d4251bbdc - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html
CVE ID: CVE-2016-1646 State: PUBLISHED Published: 2016-03-29T10:00:00.000Z Last Updated: 2025-10-21T23:55:54.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.
ttp://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html - http://www.debian.org/security/2016/dsa-3531 - https://codereview.chromium.org/1804963002/ - http://www.securitytracker.com/id/1035423 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html - https://code.google.com/p/chromium/issues/detail?id=594574 - http://www.ubuntu.com/usn/USN-2955-1 - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1647 State: PUBLISHED Published: 2016-03-29T10:00:00 Last Updated: 2024-08-05T23:02:12.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://code.goog
ata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://code.google.com/p/chromium/issues/detail?id=590284 - https://codereview.chromium.org/1747183002/ - https://codereview.chromium.org/1811783002/ - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html - http://www.debian.org/security/2016/dsa-3531 - http://www.securitytracker.com/id/1035423 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html - http://www.ubuntu.com/usn/USN-2955-1 - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1648 State: PUBLISHED Published: 2016-03-29T10:00:00 Last Updated: 2024-08-05T23:02:12.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://code.google.com/p/chromium/issues/
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://code.google.com/p/chromium/issues/detail?id=590455 - https://codereview.chromium.org/1751553002/ - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html - http://www.debian.org/security/2016/dsa-3531 - http://www.securitytracker.com/id/1035423 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1649 State: PUBLISHED Published: 2016-03-29T10:00:00 Last Updated: 2024-08-05T23:02:12.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=595836 - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-sec
mium/issues/detail?id=595836 - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html - https://chromium-review.googlesource.com/334448 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html - http://www.zerodayinitiative.com/advisories/ZDI-16-224 - http://www.debian.org/security/2016/dsa-3531 - http://www.securitytracker.com/id/1035423 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html - http://www.ubuntu.com/usn/USN-2955-1 - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1650 State: PUBLISHED Published: 2016-03-29T10:00:00 Last Updated: 2024-08-05T23:02:12.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0525.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://codereview.chromium.org/176130300
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html - https://codereview.chromium.org/1761303003/ - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html - https://code.google.com/p/chromium/issues/detail?id=597518 - http://www.debian.org/security/2016/dsa-3531 - http://www.securitytracker.com/id/1035423 - https://bugs.chromium.org/p/chromium/issues/detail?id=401364 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1651 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://codereview.chromium.org/1837383011
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://codereview.chromium.org/1837383011 - http://zerodayinitiative.com/advisories/ZDI-16-243/ - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - https://crbug.com/591785 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1652 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http
urity-announce/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - https://codereview.chromium.org/1748943002/ - https://crbug.com/590275 - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02