Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 14

• Unscored —
  CVE-2016-5181

  Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5182

  Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient val…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5183

  A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for An…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5184

  PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5185

  Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5186

  Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handl…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5187

  Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, …

  oxide-qt Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5188

  Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to …

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5189

  Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5190

  Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object li…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5191

  Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insu…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5192

  Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allo…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Dec 18, 2016
• Unscored —
  CVE-2016-5193

  Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote…

  iOS Browsers
  Dec 18, 2016
• Unscored —
  CVE-2016-5194

  Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 20, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/10/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384347
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384348
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384352
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384361
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384365
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2067.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5181
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5181
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5181
• report
  https://access.redhat.com/security/cve/CVE-2016-5182
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5182
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5182
• report
  https://access.redhat.com/security/cve/CVE-2016-5183
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5183
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5183
• report
  https://access.redhat.com/security/cve/CVE-2016-5184
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5184
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5184
• report
  https://access.redhat.com/security/cve/CVE-2016-5185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5185
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5185
• report
  https://access.redhat.com/security/cve/CVE-2016-5186
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5186
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5186
• report
  https://access.redhat.com/security/cve/CVE-2016-5187
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5187
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5187
• report
  https://access.redhat.com/security/cve/CVE-2016-5188