Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 20

• Unscored —
  CVE-2015-1270

  The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in G…

  chromium-browser oxide-qt icu icu Debian Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1271

  PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which …

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1272

  Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attac…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1273

  Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, a…

  chromium-browser openjpeg Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1274

  Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes i…

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1276

  Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1277

  Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote att…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1278

  content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF docum…

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1279

  Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chr…

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1280

  SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1281

  core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1282

  Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome befo…

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1283 EPSS 18%

  Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2…

  chromium-browser oxide-qt expat matanza Debian Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1284

  The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1285

  The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1286

  Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer…

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1287

  Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a C…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1288

  The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a …

  chromium-browser Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-1289

  Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2015
• Unscored —
  CVE-2015-5605

  The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jul 23, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245575
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245576
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245580
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245581
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245582
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245585
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245586
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245591
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245592
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245593
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1245955
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1499.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1270
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1270
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1270
• report
  https://access.redhat.com/security/cve/CVE-2015-1271
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1271
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1271
• report
  https://access.redhat.com/security/cve/CVE-2015-1272
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1272
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1272
• report
  https://access.redhat.com/security/cve/CVE-2015-1273
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1273
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1273
• report
  https://access.redhat.com/security/cve/CVE-2015-1274
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1274
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1274
• report
  https://access.redhat.com/security/cve/CVE-2015-1276
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1276