Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 6

• High 8.8
  CVE-2016-1646 Exploited EPSS 48%

  The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, d…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Mar 29, 2016

  KEV Jun 8, 2022
• Unscored —
  CVE-2016-1647

  Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widg…

  chromium-browser oxide-qt Ubuntu
  Mar 29, 2016
• Unscored —
  CVE-2016-1648

  Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions…

  chromium-browser Ubuntu
  Mar 29, 2016
• Unscored —
  CVE-2016-1649

  The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, doe…

  chromium-browser oxide-qt Ubuntu
  Mar 29, 2016
• Unscored —
  CVE-2016-1650

  The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc i…

  chromium-browser Ubuntu
  Mar 29, 2016
• Unscored —
  CVE-2016-3679

  Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, all…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Mar 29, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1321811
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1321812
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1321814
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1321815
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1321816
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0525.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1646
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1646
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2016-1647
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1647
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1647
• report
  https://access.redhat.com/security/cve/CVE-2016-1648
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1648
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1648
• report
  https://access.redhat.com/security/cve/CVE-2016-1649
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1649
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1649
• report
  https://access.redhat.com/security/cve/CVE-2016-1650
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1650
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1650
• report
  https://access.redhat.com/security/cve/CVE-2016-3679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1322490
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-3679
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-3679