Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 8

• Unscored —
  CVE-2016-5139

  Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…

  chromium-browser openjpeg2 openjpeg2 Debian Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5140

  Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chr…

  chromium-browser Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5141

  Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors invo…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5142

  The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does n…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5143

  The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the sc…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5144

  The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the sc…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5145

  Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a struct…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5146

  Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service…

  chromium-browser oxide-qt Ubuntu
  Aug 7, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363980
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363981
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363982
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363983
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363984
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363985
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363986
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1363987
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1580.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5139
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5139
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5139
• report
  https://access.redhat.com/security/cve/CVE-2016-5140
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5140
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5140
• report
  https://access.redhat.com/security/cve/CVE-2016-5141
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5141
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5141
• report
  https://access.redhat.com/security/cve/CVE-2016-5142
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5142
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5142
• report
  https://access.redhat.com/security/cve/CVE-2016-5143
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5143
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5143
• report
  https://access.redhat.com/security/cve/CVE-2016-5144
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5144
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5144
• report
  https://access.redhat.com/security/cve/CVE-2016-5145
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5145
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5145
• report
  https://access.redhat.com/security/cve/CVE-2016-5146
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5146
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5146