Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 20

• High 8.8
  CVE-2017-5130

  An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other pr…

  chromium-browser oxide-qt libxml2 libxml2 Browsers Debian Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15386

  Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the content…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15387

  Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote at…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15388

  Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15389

  An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof …

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15390

  Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform …

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15391

  Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to acces…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15392

  Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Wind…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15393

  Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote at…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15394 Public exploit

  Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-15395

  A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap …

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5124 Public exploit

  Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5125

  Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit he…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5126

  A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5127

  Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap c…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5128

  Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit h…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5129

  A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an ou…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5131

  An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit hea…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5132

  Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially expl…

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018
• Unscored —
  CVE-2017-5133

  Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt …

  chromium-browser oxide-qt Browsers Ubuntu
  Feb 7, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503530
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503531
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503533
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503534
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503535
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503537
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503539
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503540
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503542
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503543
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503544
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503545
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503548
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503550
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2997.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5124
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5124
• report
  https://access.redhat.com/security/cve/CVE-2017-5125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5125
• report
  https://access.redhat.com/security/cve/CVE-2017-5126
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5126
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5126
• report
  https://access.redhat.com/security/cve/CVE-2017-5127
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5127
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5127
• report
  https://access.redhat.com/security/cve/CVE-2017-5128
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5128
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5128
• report
  https://access.redhat.com/security/cve/CVE-2017-5129