RHSA-2015:0093 — Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Release	Package	Fixed in
Red Hat · RHEL 6 rhel_extras:6	chromium-browser	0:40.0.2214.91-1.el6_6
Red Hat · RHEL 6 rhel_extras:6	chromium-browser-debuginfo	0:40.0.2214.91-1.el6_6

Vulnerabilities 29

Unscored —

CVE-2014-7923

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7924

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attacke…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7925

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, all…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7926

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7928

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which …

chromium-browser oxide-qt libv8-3.14 Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7930

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Go…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7931

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of ser…

chromium-browser oxide-qt libv8-3.14 Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7933

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as…

chromium-browser oxide-qt ffmpeg libav Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7934

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows r…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7935

Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome befo…

chromium-browser Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7936

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc…

chromium-browser Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7937

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.…

chromium-browser oxide-qt ffmpeg Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7938

The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (mem…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7939

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass th…

chromium-browser Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7941

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome be…

chromium-browser Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7942

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which al…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7943

Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7944

The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.…

chromium-browser Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7945

OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…

chromium-browser openjpeg2 vxl Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7946

The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chro…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7947

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…

chromium-browser openjpeg2 openjpeg2 vxl Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7948

The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Goo…

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-9654

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in G…

icu icu Debian Ubuntu

Apr 24, 2017
Unscored —

CVE-2015-1205

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service …

chromium-browser oxide-qt Ubuntu

Jan 22, 2015
Unscored —

CVE-2015-1346

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allo…

chromium-browser oxide-qt libv8-3.14 Ubuntu

Jan 22, 2015

References

article
https://access.redhat.com/security/updates/classification/#important
article
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185202
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185203
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185204
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185205
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185206
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185208
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185209
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185210
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185211
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185212
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185213
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185214
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185215
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185216
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185217
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185218
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185219
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185220
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185221
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185222
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185223
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185224
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185225
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185226
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185229
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185230
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0093.json
report
https://access.redhat.com/security/cve/CVE-2014-7923
advisory
https://www.cve.org/CVERecord?id=CVE-2014-7923
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-7923
report
https://access.redhat.com/security/cve/CVE-2014-7924
advisory
https://www.cve.org/CVERecord?id=CVE-2014-7924
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-7924
report
https://access.redhat.com/security/cve/CVE-2014-7925
advisory
https://www.cve.org/CVERecord?id=CVE-2014-7925
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-7925
report
https://access.redhat.com/security/cve/CVE-2014-7926

Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 29

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attacke…

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, all…

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome…

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which …

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp…

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Go…

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of ser…

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink…

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as…

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows r…

Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome befo…

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc…

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.…

The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (mem…

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass th…

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome be…

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which al…

Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds…

The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.…

OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…

The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chro…

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…

The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Goo…

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in G…

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service …

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allo…

References