Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (21)
📋 Description
CVE-2017-5091 — chromium-browser: use after free in indexeddb CVE-2017-5092 — chromium-browser: use after free in ppapi CVE-2017-5093 — chromium-browser: ui spoofing in blink CVE-2017-5094 — chromium-browser: type confusion in extensions CVE-2017-5095 — chromium-browser: out-of-bounds write in pdfium CVE-2017-5096 — chromium-browser: user information leak via android intents CVE-2017-5097 — chromium-browser: out-of-bounds read in skia CVE-2017-5098 — chromium-browser: use after free in v8 CVE-2017-5099 — chromium-browser: out-of-bounds write in ppapi CVE-2017-5100 — chromium-browser: use after free in chrome apps CVE-2017-5101 — chromium-browser: url spoofing in omnibox CVE-2017-5102 — chromium-browser: uninitialized use in skia CVE-2017-5103 — chromium-browser: uninitialized use in skia CVE-2017-5104 — chromium-browser: ui spoofing in browser CVE-2017-5105 — chromium-browser: url spoofing in omnibox CVE-2017-5106 — chromium-browser: url spoofing in omnibox CVE-2017-5107 — chromium-browser: user information leak via svg CVE-2017-5108 — chromium-browser: type confusion in pdfium CVE-2017-5109 — chromium-browser: ui spoofing in browser CVE-2017-5110 — chromium-browser: ui spoofing in payments dialog CVE-2017-7000 — chromium-browser: pointer disclosure in sqlite
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (25)
- selfhttps://access.redhat.com/errata/RHSA-2017:1833
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475193
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475194
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475195
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475196
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475197
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475198
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475199
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475200
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475201
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475202
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475203
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475204
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475205
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475206
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475207
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475208
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475209
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475210
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475211
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475212
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1475213
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1833.json