Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 21

• Unscored —
  CVE-2016-5147

  Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles de…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5148

  Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5149

  The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux reli…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5150

  WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Win…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5151

  PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, whi…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5152

  Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome…

  chromium-browser openjpeg2 Debian Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5153

  The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5154

  Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and be…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5155

  Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate acces…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5156

  extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X an…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5157

  Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrom…

  chromium-browser openjpeg2 Debian Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5158

  Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…

  chromium-browser openjpeg2 openjpeg2 Debian Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5159

  Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and …

  chromium-browser openjpeg2 openjpeg2 Debian Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5160

  The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5161

  The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5162

  The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5163

  The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 …

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5164

  Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Goo…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5165

  Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5166

  The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux d…

  chromium-browser Ubuntu
  Sep 11, 2016
• Unscored —
  CVE-2016-5167

  Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 o…

  chromium-browser oxide-qt Ubuntu
  Sep 11, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372208
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372213
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372214
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372215
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372216
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372217
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372218
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372219
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372221
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372224
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372225
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372228
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372229
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1854.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5147
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5147
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5147
• report
  https://access.redhat.com/security/cve/CVE-2016-5148
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5148
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5148
• report
  https://access.redhat.com/security/cve/CVE-2016-5149
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5149
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5149
• report
  https://access.redhat.com/security/cve/CVE-2016-5150
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5150
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5150
• report
  https://access.redhat.com/security/cve/CVE-2016-5151
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5151
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5151