Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 10

• Unscored —
  CVE-2017-5111

  A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5112

  Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute a…

  chromium-browser oxide-qt Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5113

  Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android,…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5114

  Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and …

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5115 EPSS 26%

  Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploi…

  chromium-browser oxide-qt libv8-3.14 Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5116 EPSS 13%

  Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5117

  Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote att…

  chromium-browser oxide-qt Linux Windows Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5118

  Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to corre…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5119

  Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017
• Unscored —
  CVE-2017-5120

  Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windo…

  chromium-browser oxide-qt Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488772
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488773
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488776
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488779
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488782
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2676.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5111
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5111
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5111
• report
  https://access.redhat.com/security/cve/CVE-2017-5112
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5112
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5112
• report
  https://access.redhat.com/security/cve/CVE-2017-5113
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5113
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5113
• report
  https://access.redhat.com/security/cve/CVE-2017-5114
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5114
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5114
• report
  https://access.redhat.com/security/cve/CVE-2017-5115
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5115
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5115
• report
  https://access.redhat.com/security/cve/CVE-2017-5116
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5116
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5116
• report
  https://access.redhat.com/security/cve/CVE-2017-5117
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5117
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5117
• report
  https://access.redhat.com/security/cve/CVE-2017-5118
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5118
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5118
• report
  https://access.redhat.com/security/cve/CVE-2017-5119
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5119