Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 13

• Unscored —
  CVE-2015-1235

  The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Goo…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1236

  The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio …

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1237

  Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.c…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1238

  Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1240

  gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote a…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1241

  Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of to…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1242

  The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Goo…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1244

  The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not re…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1245

  Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_r…

  chromium-browser Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1246

  Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bound…

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1247

  The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Ch…

  chromium-browser Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1248

  The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executab…

  chromium-browser Ubuntu
  Apr 19, 2015
• Unscored —
  CVE-2015-1249

  Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Apr 19, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211919
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211920
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211921
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211922
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211923
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211924
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211925
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211926
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211927
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211929
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211932
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0816.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1235
• report
  https://access.redhat.com/security/cve/CVE-2015-1236
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1236
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1236
• report
  https://access.redhat.com/security/cve/CVE-2015-1237
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1237
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1237
• report
  https://access.redhat.com/security/cve/CVE-2015-1238
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1238
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1238
• report
  https://access.redhat.com/security/cve/CVE-2015-1240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1240
• report
  https://access.redhat.com/security/cve/CVE-2015-1241
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1241
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1241
• report
  https://access.redhat.com/security/cve/CVE-2015-1242
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1242
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1242
• report
  https://access.redhat.com/security/cve/CVE-2015-1244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1244