Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 11

• Unscored —
  CVE-2015-1291

  The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 4…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1292

  The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as us…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1293

  The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Sa…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1294

  Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Googl…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1295

  Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_…

  chromium-browser Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1296

  The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not p…

  chromium-browser Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1297

  The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0…

  chromium-browser Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1298

  The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chro…

  chromium-browser Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1299

  Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85,…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1300

  The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as u…

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-1301

  Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Sep 3, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259159
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259161
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259163
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259164
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259168
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259169
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259170
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1712.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1291
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1291
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1291
• report
  https://access.redhat.com/security/cve/CVE-2015-1292
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1292
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1292
• report
  https://access.redhat.com/security/cve/CVE-2015-1293
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1293
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1293
• report
  https://access.redhat.com/security/cve/CVE-2015-1294
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1294
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1294
• report
  https://access.redhat.com/security/cve/CVE-2015-1295
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1295
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1295
• report
  https://access.redhat.com/security/cve/CVE-2015-1296
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1296
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1296
• report
  https://access.redhat.com/security/cve/CVE-2015-1297
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1297
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1297
• report
  https://access.redhat.com/security/cve/CVE-2015-1298
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1298
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1298
• report
  https://access.redhat.com/security/cve/CVE-2015-1299