Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 24

• Unscored —
  CVE-2016-1672

  The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Googl…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1673

  Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspe…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1674

  The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy …

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1675

  Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by levera…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1676

  extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not proper…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1677

  uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, whic…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1678

  objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1679

  The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1680

  Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, al…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1681

  Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google C…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1682

  The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerCon…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1683

  numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which all…

  chromium-browser oxide-qt libxslt libxslt Debian Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1684

  numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl…

  chromium-browser oxide-qt libxslt libxslt Debian Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1685

  core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1686

  The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in …

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1687

  The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes,…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1688

  The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1689

  Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 all…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1690

  The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and J…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1691

  Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1692

  WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-ori…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1693

  browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1694

  browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clea…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1695

  Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340006
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340007
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340011
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340012
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340014
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340016
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340017
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340018
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340022
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340023
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340024
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340027
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340028
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340029
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340030
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1190.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1672
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1672
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1672
• article
  http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html
• report
  https://access.redhat.com/security/cve/CVE-2016-1673
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1673
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1673
• report
  https://access.redhat.com/security/cve/CVE-2016-1674
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1674
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1674
• report
  https://access.redhat.com/security/cve/CVE-2016-1675
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1675