Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 8

• Unscored —
  CVE-2016-1696

  The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows …

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1697

  The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome bef…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1698

  The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome be…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1699

  WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Googl…

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1700

  extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects duri…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1701

  The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and J…

  chromium-browser Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1702

  The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does …

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016
• Unscored —
  CVE-2016-1703

  Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Jun 5, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342003
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342004
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342007
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342009
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1201.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1696
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1696
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1696
• report
  https://access.redhat.com/security/cve/CVE-2016-1697
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1697
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1697
• report
  https://access.redhat.com/security/cve/CVE-2016-1698
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1698
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1698
• report
  https://access.redhat.com/security/cve/CVE-2016-1699
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1699
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1699
• report
  https://access.redhat.com/security/cve/CVE-2016-1700
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1700
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1700
• report
  https://access.redhat.com/security/cve/CVE-2016-1701
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1701
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1701
• report
  https://access.redhat.com/security/cve/CVE-2016-1702
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1702
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1702
• report
  https://access.redhat.com/security/cve/CVE-2016-1703
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1703
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1703