Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 3

• Unscored —
  CVE-2017-5087

  A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for An…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5088

  Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, a…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5089

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to…

  chromium-browser oxide-qt Browsers Ubuntu
  Oct 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1462148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1462149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1462151
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1495.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5087
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5087
• report
  https://access.redhat.com/security/cve/CVE-2017-5088
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5088
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5088
• report
  https://access.redhat.com/security/cve/CVE-2017-5089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5089