Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 12

• Unscored —
  CVE-2015-8947

  hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-r…

  harfbuzz harfbuzz Debian Ubuntu
  Jul 19, 2016
• Unscored —
  CVE-2016-1612

  The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensu…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1613

  Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.…

  chromium-browser Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1614

  The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Bli…

  chromium-browser oxide-qt Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1615

  The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin vi…

  chromium-browser Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1616

  The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0…

  chromium-browser Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1617

  The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP…

  chromium-browser oxide-qt Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1618

  Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random…

  chromium-browser oxide-qt Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1619

  Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj…

  chromium-browser Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-1620

  Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-2051

  Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allo…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jan 25, 2016
• Unscored —
  CVE-2016-2052

  Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow atta…

  chromium-browser oxide-qt harfbuzz harfbuzz Debian Ubuntu
  Jan 25, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300989
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300990
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300991
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300992
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300993
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300994
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300995
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301550
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301553
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0072.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8947
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8947
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8947
• report
  https://access.redhat.com/security/cve/CVE-2016-1612
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1612
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1612
• report
  https://access.redhat.com/security/cve/CVE-2016-1613
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1613
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1613
• report
  https://access.redhat.com/security/cve/CVE-2016-1614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1614
• report
  https://access.redhat.com/security/cve/CVE-2016-1615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1615
• report
  https://access.redhat.com/security/cve/CVE-2016-1616
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1616
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1616
• report
  https://access.redhat.com/security/cve/CVE-2016-1617
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1617
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1617
• report
  https://access.redhat.com/security/cve/CVE-2016-1618
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1618
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1618
• report
  https://access.redhat.com/security/cve/CVE-2016-1619