Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (12)
📋 Description
CVE-2017-5057 — chromium-browser: type confusion in pdfium CVE-2017-5058 — chromium-browser: heap use after free in print preview CVE-2017-5059 — chromium-browser: type confusion in blink CVE-2017-5060 — chromium-browser: url spoofing in omnibox CVE-2017-5061 — chromium-browser: url spoofing in omnibox CVE-2017-5062 — chromium-browser: use after free in chrome apps CVE-2017-5063 — chromium-browser: heap overflow in skia CVE-2017-5064 — chromium-browser: use after free in blink CVE-2017-5065 — chromium-browser: incorrect ui in blink CVE-2017-5066 — chromium-browser: incorrect signature handing in networking CVE-2017-5067 — chromium-browser: url spoofing in omnibox CVE-2017-5069 — chromium-browser: cross-origin bypass in blink
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:58.0.3029.81-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2017:1124
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443835
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443836
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443837
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443838
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443839
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443840
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443841
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443845
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443847
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443848
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443849
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1443850
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1124.json