Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 8

• Unscored —
  CVE-2016-5170

  WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5171

  WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not preven…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5172

  The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attacker…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5173

  The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, w…

  chromium-browser Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5174

  browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen…

  chromium-browser Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5175

  Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5176

  Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecif…

  chromium-browser Ubuntu
  Sep 29, 2016
• Unscored —
  CVE-2016-7549

  Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame o…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375863
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375865
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375867
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375868
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1905.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5170
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5170
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5170
• report
  https://access.redhat.com/security/cve/CVE-2016-5171
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5171
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5171
• report
  https://access.redhat.com/security/cve/CVE-2016-5172
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5172
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5172
• report
  https://access.redhat.com/security/cve/CVE-2016-5173
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5173
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5173
• report
  https://access.redhat.com/security/cve/CVE-2016-5174
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5174
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5174
• report
  https://access.redhat.com/security/cve/CVE-2016-5175
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5175
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5175
• report
  https://access.redhat.com/security/cve/CVE-2016-5176
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1380331
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5176
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5176
• article
  https://googlechromereleases.blogspot.cz/2016/09/stable-channel-update-for-desktop_13.html
• report
  https://access.redhat.com/security/cve/CVE-2016-7549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1380301
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7549
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7549