Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 9

• Unscored —
  CVE-2016-1651

  fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement…

  chromium-browser Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1652

  Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_…

  chromium-browser Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1653

  The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which …

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1654

  The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allow…

  chromium-browser oxide-qt Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1655

  Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, wh…

  chromium-browser oxide-qt Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1656

  The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended …

  chromium-browser Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1657

  The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google …

  chromium-browser Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1658

  The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin c…

  chromium-browser Ubuntu
  Apr 18, 2016
• Unscored —
  CVE-2016-1659

  Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Apr 18, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327112
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327115
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327117
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1327120
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0638.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1651
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1651
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1651
• report
  https://access.redhat.com/security/cve/CVE-2016-1652
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1652
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1652
• report
  https://access.redhat.com/security/cve/CVE-2016-1653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1653
• report
  https://access.redhat.com/security/cve/CVE-2016-1654
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1654
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1654
• report
  https://access.redhat.com/security/cve/CVE-2016-1655
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1655
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1655
• report
  https://access.redhat.com/security/cve/CVE-2016-1656
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1656
• report
  https://access.redhat.com/security/cve/CVE-2016-1657
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1657
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1657
• report
  https://access.redhat.com/security/cve/CVE-2016-1658
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1658
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1658
• report
  https://access.redhat.com/security/cve/CVE-2016-1659
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1659
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1659