Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 27

• Unscored —
  CVE-2016-5203

  A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Andr…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5204

  Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5205

  Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5206

  The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrec…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5207

  In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5208

  Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corru…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5209

  Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5210

  Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5211

  A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Andr…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5212

  Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized D…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5213

  A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5214

  Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent…

  chromium-browser Windows Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5215

  A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for An…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5216

  A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Andr…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5217

  The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android inco…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5218

  The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android inco…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5219

  A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for And…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5220

  PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly hand…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5221

  Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.8…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5222

  Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5223

  Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Andr…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5224

  A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.7…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5225

  Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handl…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-5226

  Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL ba…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-9650

  Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handl…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Jan 19, 2017
• Unscored —
  CVE-2016-9651 Public exploit EPSS 11%

  A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2016-9652

  Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 20, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400851
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400853
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400854
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400856
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400857
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400859
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400861
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400862
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400863
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400865
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400867
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400868
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400871
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400872
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400873
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400876
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400877
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400879
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2919.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5203
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5203
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5203
• report
  https://access.redhat.com/security/cve/CVE-2016-5204
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5204
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5204
• report
  https://access.redhat.com/security/cve/CVE-2016-5205
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5205
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5205