Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 16

• Unscored —
  CVE-2016-1630

  The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google C…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1631

  The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the P…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1632

  The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows r…

  chromium-browser Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1633

  Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1634

  Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/Styl…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1635

  extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider ob…

  chromium-browser Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1636

  The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.262…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1637

  The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1638

  extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not…

  chromium-browser Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1639

  Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC A…

  chromium-browser Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1640

  The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block …

  chromium-browser Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1641

  Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 …

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-1642

  Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-2843

  Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allo…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-2844

  WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly det…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016
• Unscored —
  CVE-2016-2845

  The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignor…

  chromium-browser oxide-qt Ubuntu
  Mar 6, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314214
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314215
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314216
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314217
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314218
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314219
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314221
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314224
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314225
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314227
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0359.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1630
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1630
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1630
• report
  https://access.redhat.com/security/cve/CVE-2016-1631
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1631
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1631
• report
  https://access.redhat.com/security/cve/CVE-2016-1632
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1632
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1632
• report
  https://access.redhat.com/security/cve/CVE-2016-1633
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1633
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1633
• report
  https://access.redhat.com/security/cve/CVE-2016-1634
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1634
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1634
• report
  https://access.redhat.com/security/cve/CVE-2016-1635
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1635
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1635
• report
  https://access.redhat.com/security/cve/CVE-2016-1636
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1636
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1636
• report
  https://access.redhat.com/security/cve/CVE-2016-1637
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1637