Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 21

• Unscored —
  CVE-2017-5006

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly hand…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5007 Public exploit

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly hand…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5008

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5009

  WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perfo…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5010

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promise…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5011

  Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5012

  A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for An…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5013

  Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which …

  chromium-browser Linux Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5014

  Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac,…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5015

  Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unico…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5016

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to preven…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5017

  Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allo…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5018

  Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently str…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5019

  A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allow…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5020

  Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user …

  chromium-browser Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5021

  A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allow…

  chromium-browser Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5022

  Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to proper…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5023

  Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for And…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Feb 17, 2017
• Unscored —
  CVE-2017-5024

  FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, whi…

  chromium-browser oxide-qt ffmpeg ffmpeg Linux Windows Browsers Debian Ubuntu Alpine
  Feb 17, 2017
• Unscored —
  CVE-2017-5025

  FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, whi…

  chromium-browser oxide-qt ffmpeg ffmpeg Linux Windows Browsers Debian Ubuntu Alpine
  Feb 17, 2017
• Unscored —
  CVE-2017-5026

  Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swappe…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Feb 17, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416658
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416659
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416660
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416661
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416662
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416663
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416665
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416667
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416668
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416669
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416670
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416673
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416674
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416675
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416676
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416677
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0206.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5006
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5006
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5006
• report
  https://access.redhat.com/security/cve/CVE-2017-5007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5007
• report
  https://access.redhat.com/security/cve/CVE-2017-5008
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5008
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5008
• report
  https://access.redhat.com/security/cve/CVE-2017-5009
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5009
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5009
• report
  https://access.redhat.com/security/cve/CVE-2017-5010
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5010
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5010