Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 20

• Unscored —
  CVE-2015-1213

  The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chro…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1214

  Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Ski…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1215

  The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a de…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1216

  Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCus…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1217

  The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings …

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1218

  Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.7…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1219

  Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google …

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1220

  Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cp…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1221

  Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1222

  Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_wo…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1223

  Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used i…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1224

  The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Googl…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1225

  PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-boun…

  chromium-browser Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1226

  The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before…

  chromium-browser Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1227

  The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does n…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1228

  The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1229

  net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authenti…

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1230

  The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1231

  Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-1232

  Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chro…

  chromium-browser Ubuntu
  Mar 9, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198520
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198522
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198525
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198526
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198527
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198528
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198529
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198530
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198531
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198533
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198534
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198535
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198537
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198542
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0627.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1213
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1213
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1213
• report
  https://access.redhat.com/security/cve/CVE-2015-1214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1214
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1214
• report
  https://access.redhat.com/security/cve/CVE-2015-1215
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1215
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1215
• report
  https://access.redhat.com/security/cve/CVE-2015-1216
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1216
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1216
• report
  https://access.redhat.com/security/cve/CVE-2015-1217
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1217
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1217
• report
  https://access.redhat.com/security/cve/CVE-2015-1218
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1218