Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 15

• Unscored —
  CVE-2015-1251

  Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome bef…

  chromium-browser Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1252

  common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows rem…

  chromium-browser Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1253

  core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1254

  core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1255

  Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Go…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1256

  Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows r…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1257

  platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.23…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1258

  Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, whic…

  chromium-browser oxide-qt libvpx Debian Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1259

  PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attacker…

  chromium-browser Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1260

  Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementatio…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1261

  android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android …

  May 20, 2015
• Unscored —
  CVE-2015-1262

  platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a…

  chromium-browser oxide-qt Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1263

  The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a …

  chromium-browser Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1264

  Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to …

  chromium-browser Ubuntu
  May 20, 2015
• Unscored —
  CVE-2015-1265 Public exploit

  Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  May 20, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223259
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223262
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223264
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223269
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223272
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223273
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1023.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1251
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1251
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1251
• article
  http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
• report
  https://access.redhat.com/security/cve/CVE-2015-1252
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1252
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1252
• report
  https://access.redhat.com/security/cve/CVE-2015-1253
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1253
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1253
• report
  https://access.redhat.com/security/cve/CVE-2015-1254
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1254
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1254
• report
  https://access.redhat.com/security/cve/CVE-2015-1255
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1255
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1255
• report
  https://access.redhat.com/security/cve/CVE-2015-1256
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1256
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1256
• report
  https://access.redhat.com/security/cve/CVE-2015-1257
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1257