Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 12

• Unscored —
  CVE-2017-5057

  Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Andro…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5058

  A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potent…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5059

  Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Androi…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5060

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5061

  A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote atta…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5062

  A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 fo…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5063

  A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for And…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5064

  Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5065

  Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac al…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5066

  Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 fo…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5067

  An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5069

  Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and M…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443835
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443836
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443838
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443839
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443840
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443845
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443848
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443850
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1124.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5057
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5057
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5057
• report
  https://access.redhat.com/security/cve/CVE-2017-5058
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5058
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5058
• report
  https://access.redhat.com/security/cve/CVE-2017-5059
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5059
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5059
• report
  https://access.redhat.com/security/cve/CVE-2017-5060
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5060
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5060
• report
  https://access.redhat.com/security/cve/CVE-2017-5061
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5061
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5061
• report
  https://access.redhat.com/security/cve/CVE-2017-5062
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5062
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5062
• report
  https://access.redhat.com/security/cve/CVE-2017-5063
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5063
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5063
• report
  https://access.redhat.com/security/cve/CVE-2017-5064
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5064
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5064