RHSA-2017:2997HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
October 20, 2017
Last Modified
November 12, 2026

🔗 CVE IDs covered (20)

CVE-2017-5125 →CVE-2017-5129 →CVE-2017-5131 →CVE-2017-5132 →CVE-2017-15390 →CVE-2017-5124 →CVE-2017-5127 →CVE-2017-5130 →CVE-2017-15386 →CVE-2017-15388 →CVE-2017-15394 →CVE-2017-15395 →CVE-2017-5126 →CVE-2017-5133 →CVE-2017-15387 →CVE-2017-15391 →CVE-2017-15393 →CVE-2017-5128 →CVE-2017-15389 →CVE-2017-15392 →

📋 Description

CVE-2017-5124 — chromium-browser: uxss with mhtml CVE-2017-5125 — chromium-browser: heap overflow in skia CVE-2017-5126 — chromium-browser: use after free in pdfium CVE-2017-5127 — chromium-browser: use after free in pdfium CVE-2017-5128 — chromium-browser: heap overflow in webgl CVE-2017-5129 — chromium-browser: use after free in webaudio CVE-2017-5130 — chromium-browser: heap overflow in libxml2 CVE-2017-5131 — chromium-browser: out of bounds write in skia CVE-2017-5132 — chromium-browser: incorrect stack manipulation in webassembly CVE-2017-5133 — chromium-browser: out of bounds write in skia CVE-2017-15386 — chromium-browser: ui spoofing in blink CVE-2017-15387 — chromium-browser: content security bypass CVE-2017-15388 — chromium-browser: out of bounds read in skia CVE-2017-15389 — chromium-browser: url spoofing in omnibox CVE-2017-15390 — chromium-browser: url spoofing in omnibox CVE-2017-15391 — chromium-browser: extension limitation bypass in extensions CVE-2017-15392 — chromium-browser: incorrect registry key handling in platformintegration CVE-2017-15393 — chromium-browser: referrer leak in devtools CVE-2017-15394 — chromium-browser: url spoofing in extensions ui CVE-2017-15395 — chromium-browser: null pointer dereference in imagecapture

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:62.0.3202.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (24)