Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 3

• Unscored —
  CVE-2015-1302

  The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, whi…

  chromium-browser Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-1303

  bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow act…

  chromium-browser oxide-qt Ubuntu
  Oct 12, 2015
• Unscored —
  CVE-2015-1304

  object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls …

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Oct 12, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1266409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1266410
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1841.json
• report
  https://access.redhat.com/security/cve/CVE-2015-1302
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1280298
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1302
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1302
• article
  http://googlechromereleases.blogspot.com/2015/11/stable-channel-update.html
• report
  https://access.redhat.com/security/cve/CVE-2015-1303
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1303
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1303
• report
  https://access.redhat.com/security/cve/CVE-2015-1304
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1304
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1304