Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 16

• High 8.8
  CVE-2017-5070 Exploited EPSS 32%

  Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

  KEV Jun 8, 2022
• Unscored —
  CVE-2017-5071

  Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5072

  Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to…

  chromium-browser oxide-qt Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5073

  Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5074

  A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5075

  Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and M…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5076

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5077

  Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5078

  Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5079

  Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5080

  A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote …

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5081

  Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5082

  Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for A…

  chromium-browser oxide-qt Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5083

  Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5085

  Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced …

  chromium-browser oxide-qt iOS Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5086

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote …

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459022
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459023
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459024
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459027
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459028
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459029
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459030
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459031
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459033
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459035
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459036
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459037
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1399.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5070
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5070
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5070
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2017-5071
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5071
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5071
• report
  https://access.redhat.com/security/cve/CVE-2017-5072
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5072
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5072
• report
  https://access.redhat.com/security/cve/CVE-2017-5073
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5073
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5073
• report
  https://access.redhat.com/security/cve/CVE-2017-5074
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5074
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5074
• report
  https://access.redhat.com/security/cve/CVE-2017-5075
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5075
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5075
• report
  https://access.redhat.com/security/cve/CVE-2017-5076