Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (17)
📋 Description
CVE-2016-1705 — chromium-browser: various fixes from internal audits CVE-2016-1706 — chromium-browser: sandbox escape in ppapi CVE-2016-1708 — chromium-browser: use-after-free in extensions CVE-2016-1709 — chromium-browser: heap-buffer-overflow in sfntly CVE-2016-1710 — chromium-browser: same-origin bypass in blink CVE-2016-1711 — chromium-browser: same-origin bypass in blink CVE-2016-5127 — chromium-browser: use-after-free in blink CVE-2016-5128 — chromium-browser: same-origin bypass in v8 CVE-2016-5129 — chromium-browser: memory corruption in v8 CVE-2016-5130 — chromium-browser: url spoofing CVE-2016-5131 — libxml2: Use after free triggered by XPointer paths beginning with range-to CVE-2016-5132 — chromium-browser: limited same-origin bypass in service workers CVE-2016-5133 — chromium-browser: origin confusion in proxy authentication CVE-2016-5134 — chromium-browser: url leakage via pac script CVE-2016-5135 — chromium-browser: content-security-policy bypass CVE-2016-5136 — chromium-browser: use after free in extensions CVE-2016-5137 — chromium-browser: history sniffing with hsts and csp
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:52.0.2743.82-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (21)
- selfhttps://access.redhat.com/errata/RHSA-2016:1485
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358630
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358632
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358633
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358634
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358636
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358637
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358638
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358639
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358640
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358641
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358642
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358643
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358645
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358646
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358647
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358648
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1358649
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1485.json