Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 21

• Unscored —
  CVE-2017-5091

  A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a rem…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5092

  Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed …

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5093

  Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows,…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5094

  Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and An…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5095

  Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker t…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5096

  Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for …

  chromium-browser oxide-qt Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5097

  Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote at…

  chromium-browser oxide-qt Linux Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5098 EPSS 16%

  A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote att…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5099

  Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a re…

  chromium-browser oxide-qt Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5100

  A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5101

  Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a re…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5102

  Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allow…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5103

  Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remo…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5104

  Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker …

  chromium-browser oxide-qt Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5105

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5106

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5107

  A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote at…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5108

  Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote a…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5109

  Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 fo…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5110

  Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-7000

  An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The…

  chromium-browser oxide-qt Ubuntu
  Apr 3, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475193
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475196
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475197
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475199
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475203
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475204
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475205
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475206
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475208
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1475213
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1833.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5091
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5091
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5091
• report
  https://access.redhat.com/security/cve/CVE-2017-5092
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5092
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5092
• report
  https://access.redhat.com/security/cve/CVE-2017-5093
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5093
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5093
• report
  https://access.redhat.com/security/cve/CVE-2017-5094
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5094
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5094
• report
  https://access.redhat.com/security/cve/CVE-2017-5095
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5095