Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 7

• Unscored —
  CVE-2016-1622

  The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1623

  The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from oc…

  chromium-browser oxide-qt Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1624

  Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48…

  chromium-browser oxide-qt brotli brotli Debian Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1625

  The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation t…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1626

  The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, mis…

  chromium-browser openjpeg2 Debian Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1627

  The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and en…

  chromium-browser Ubuntu
  Feb 14, 2016
• Unscored —
  CVE-2016-1628

  pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value,…

  chromium-browser openjpeg2 Debian Ubuntu
  Feb 21, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306152
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306154
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306155
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306156
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1306157
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0241.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1622
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1622
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1622
• report
  https://access.redhat.com/security/cve/CVE-2016-1623
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1623
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1623
• report
  https://access.redhat.com/security/cve/CVE-2016-1624
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1624
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1624
• report
  https://access.redhat.com/security/cve/CVE-2016-1625
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1625
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1625
• report
  https://access.redhat.com/security/cve/CVE-2016-1626
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1626
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1626
• report
  https://access.redhat.com/security/cve/CVE-2016-1627
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1627
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1627
• report
  https://access.redhat.com/security/cve/CVE-2016-1628
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1310577
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1628
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1628