Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 17

• High 8.8
  CVE-2016-5131

  Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote atta…

  chromium-browser oxide-qt libxml2 libxml2 Debian Ubuntu Alpine
  Jul 23, 2016
• Unscored —
  CVE-2016-1705

  Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-1706

  The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugi…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-1708

  The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.8…

  chromium-browser Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-1709

  Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as us…

  chromium-browser Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-1710

  The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-1711

  WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable fram…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5127

  Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 5…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5128

  objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API intercept…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5129

  Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objec…

  chromium-browser oxide-qt nodejs libv8-3.14 Ubuntu Alpine
  Jul 23, 2016
• Unscored —
  CVE-2016-5130

  content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5132

  The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts spec…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5133

  Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-mi…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5134

  net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5135

  WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not …

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5136

  Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrom…

  chromium-browser Ubuntu
  Jul 23, 2016
• Unscored —
  CVE-2016-5137

  The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP…

  chromium-browser oxide-qt Ubuntu
  Jul 23, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358630
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358634
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358636
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358637
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358638
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358641
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358643
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358646
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358647
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1358649
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1485.json
• report
  https://access.redhat.com/security/cve/CVE-2016-1705
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1705
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1705
• article
  https://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html
• report
  https://access.redhat.com/security/cve/CVE-2016-1706
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1706
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1706
• report
  https://access.redhat.com/security/cve/CVE-2016-1708
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1708
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1708
• report
  https://access.redhat.com/security/cve/CVE-2016-1709
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1709
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1709
• report
  https://access.redhat.com/security/cve/CVE-2016-1710
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1710
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1710
• report
  https://access.redhat.com/security/cve/CVE-2016-1711
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1711
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1711