Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (18)
📋 Description
CVE-2017-5029 — chromium-browser: integer overflow in libxslt CVE-2017-5030 — chromium-browser: memory corruption in v8 CVE-2017-5031 — chromium-browser: use after free in angle CVE-2017-5032 — chromium-browser: out of bounds write in pdfium CVE-2017-5033 — chromium-browser: bypass of content security policy in blink CVE-2017-5034 — chromium-browser: use after free in pdfium CVE-2017-5035 — chromium-browser: incorrect security ui in omnibox CVE-2017-5036 — chromium-browser: use after free in pdfium CVE-2017-5037 — chromium-browser: multiple out of bounds writes in chunkdemuxer CVE-2017-5038 — chromium-browser: use after free in guestview CVE-2017-5039 — chromium-browser: use after free in pdfium CVE-2017-5040 — chromium-browser: information disclosure in v8 CVE-2017-5041 — chromium-browser: address spoofing in omnibox CVE-2017-5042 — chromium-browser: incorrect handling of cookies in cast CVE-2017-5043 — chromium-browser: use after free in guestview CVE-2017-5044 — chromium-browser: heap overflow in skia CVE-2017-5045 — chromium-browser: information disclosure in xss auditor CVE-2017-5046 — chromium-browser: information disclosure in blink
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:57.0.2987.98-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (22)
- selfhttps://access.redhat.com/errata/RHSA-2017:0499
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431030
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431031
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431032
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431033
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431034
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431036
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431037
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431038
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431039
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431040
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431041
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431042
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431043
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431044
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431045
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431046
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431047
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1431048
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0499.json