Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 26

• Unscored —
  CVE-2015-6764

  The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used…

  nodejs libv8-3.14 Debian Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6765

  Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 al…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6766

  Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attacker…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6767

  Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in …

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6768

  The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy vi…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6769

  The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6770

  The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy vi…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6771

  js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter op…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6772

  The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigat…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6773

  The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row l…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6774

  Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions…

  chromium-browser libv8-3.14 Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6775

  fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which a…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6776

  The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow rem…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6777

  Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/Contai…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6778

  The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6779

  PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remo…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6780

  Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attacker…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6781

  Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before…

  chromium-browser Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6782

  The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6784

  The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6785

  The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) …

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6786

  The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (C…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-6787 Public exploit

  Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-8478

  Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-8479

  Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.c…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015
• Unscored —
  CVE-2015-8480

  The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.…

  chromium-browser oxide-qt Ubuntu
  Dec 6, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1285774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287441
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287481
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287484
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287485
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287486
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287488
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287489
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287495
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287499
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287500
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287501
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287502
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2545.json
• report
  https://access.redhat.com/security/cve/CVE-2015-6764
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-6764
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-6764
• article
  https://nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764/
• report
  https://access.redhat.com/security/cve/CVE-2015-6765
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-6765
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-6765
• report
  https://access.redhat.com/security/cve/CVE-2015-6766
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-6766
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-6766
• report
  https://access.redhat.com/security/cve/CVE-2015-6767
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-6767
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-6767