Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (16)
📋 Description
CVE-2016-1630 — chromium-browser: same-origin bypass in Blink CVE-2016-1631 — chromium-browser: same-origin bypass in Pepper Plugin CVE-2016-1632 — chromium-browser: bad cast in Extensions CVE-2016-1633 — chromium-browser: use-after-free in Blink CVE-2016-1634 — chromium-browser: use-after-free in Blink CVE-2016-1635 — chromium-browser: use-after-free in Blink CVE-2016-1636 — chromium-browser: SRI Validation Bypass CVE-2016-1637 — chromium-browser: information leak in Skia CVE-2016-1638 — chromium-browser: WebAPI Bypass CVE-2016-1639 — chromium-browser: use-after-free in WebRTC CVE-2016-1640 — chromium-browser: origin confusion in Extensions UI CVE-2016-1641 — chromium-browser: use-after-free in Favicon CVE-2016-1642 — chromium-browser: various fixes from internal audits CVE-2016-2843 — chromium-browser: Multiple unspecified vulnerabilities in V8 before 4.9.385.26 CVE-2016-2844 — chromium-browser: LayoutBlock.cpp in Blink does not properly determine when anonymous block wrappers may exist CVE-2016-2845 — chromium-browser: CSP implementation in Blink does not ignore a URL's path component in the case of a ServiceWorker fetch
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:49.0.2623.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (17)
- selfhttps://access.redhat.com/errata/RHSA-2016:0359
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314214
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314215
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314216
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314217
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314218
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314219
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314220
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314221
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314222
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314224
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314225
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314226
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1314227
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0359.json