RHSA-2016:1854HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
September 12, 2016
Last Modified
November 12, 2026

🔗 CVE IDs covered (21)

CVE-2016-5150 →CVE-2016-5154 →CVE-2016-5161 →CVE-2016-5163 →CVE-2016-5164 →CVE-2016-5149 →CVE-2016-5153 →CVE-2016-5156 →CVE-2016-5160 →CVE-2016-5167 →CVE-2016-5158 →CVE-2016-5162 →CVE-2016-5165 →CVE-2016-5166 →CVE-2016-5147 →CVE-2016-5148 →CVE-2016-5151 →CVE-2016-5152 →CVE-2016-5155 →CVE-2016-5157 →CVE-2016-5159 →

📋 Description

CVE-2016-5147 — chromium-browser: universal xss in blink CVE-2016-5148 — chromium-browser: universal xss in blink CVE-2016-5149 — chromium-browser: script injection in extensions CVE-2016-5150 — chromium-browser: use after free in blink CVE-2016-5151 — chromium-browser: use after free in pdfium CVE-2016-5152 — chromium-browser: heap overflow in pdfium CVE-2016-5153 — chromium-browser: use after destruction in blink CVE-2016-5154 — chromium-browser: heap overflow in pdfium CVE-2016-5155 — chromium-browser: address bar spoofing CVE-2016-5156 — chromium-browser: use after free in event bindings CVE-2016-5157 — chromium-browser: heap overflow in pdfium CVE-2016-5158 — openjpeg: heap overflow due to unsafe use of opj_aligned_malloc CVE-2016-5159 — openjpeg: heap overflow in parsing of JPEG2000 code blocks CVE-2016-5160 — chromium-browser: extensions web accessible resources bypass CVE-2016-5161 — chromium-browser: type confusion in blink CVE-2016-5162 — chromium-browser: extensions web accessible resources bypass CVE-2016-5163 — chromium-browser: address bar spoofing CVE-2016-5164 — chromium-browser: universal xss using devtools CVE-2016-5165 — chromium-browser: script injection in devtools CVE-2016-5166 — chromium-browser: smb relay attack via save page as CVE-2016-5167 — chromium-browser: various fixes from internal audits

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:53.0.2785.89-3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (25)