Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (8)
📋 Description
CVE-2016-5170 — chromium-browser: use after free in blink CVE-2016-5171 — chromium-browser: use after free in blink CVE-2016-5172 — chromium-browser: arbitrary memory read in v8 CVE-2016-5173 — chromium-browser: extension resource access CVE-2016-5174 — chromium-browser: popup not correctly suppressed CVE-2016-5175 — chromium-browser: various fixes from internal audits CVE-2016-5176 — chromium-browser: SafeBrowsing protection mechanism bypass CVE-2016-7549 — chromium-browser: DoS via invalid recipient of IPC message
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:53.0.2785.113-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2016:1905
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375863
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375864
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375865
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375866
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375867
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1375868
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1905.json