Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (29)
📋 Description
CVE-2014-7923 — ICU: regexp engine missing look-behind expression range check CVE-2014-7924 — chromium-browser: use-after-free in IndexedDB CVE-2014-7925 — chromium-browser: use-after-free in WebAudio CVE-2014-7926 — ICU: regexp engine incorrect handling of a zero length quantifier CVE-2014-7927 — chromium-browser: memory corruption in V8 CVE-2014-7928 — chromium-browser: memory corruption in V8 CVE-2014-7929 — chromium-browser: use-after-free in DOM CVE-2014-7930 — chromium-browser: use-after-free in DOM CVE-2014-7931 — chromium-browser: memory corruption in V8 CVE-2014-7932 — chromium-browser: use-after-free in DOM CVE-2014-7933 — chromium-browser: use-after-free in FFmpeg CVE-2014-7934 — chromium-browser: use-after-free in DOM CVE-2014-7935 — chromium-browser: use-after-free in Speech CVE-2014-7936 — chromium-browser: use-after-free in Views CVE-2014-7937 — chromium-browser: use-after-free in FFmpeg CVE-2014-7938 — chromium-browser: memory corruption in Fonts CVE-2014-7939 — chromium-browser: same-origin-bypass in V8 CVE-2014-7940 — ICU: uninitialized value use in the collation component CVE-2014-7941 — chromium-browser: out-of-bounds read in UI CVE-2014-7942 — chromium-browser: uninitialized-value in Fonts CVE-2014-7943 — chromium-browser: out-of-bounds read in Skia CVE-2014-7944 — chromium-browser: out-of-bounds read in PDFium CVE-2014-7945 — chromium-browser: out-of-bounds read in PDFium CVE-2014-7946 — chromium-browser: out-of-bounds read in Fonts CVE-2014-7947 — chromium-browser: out-of-bounds read in PDFium CVE-2014-7948 — chromium-browser: caching error in AppCache CVE-2014-9654 — icu: insufficient size limit checks in regular expression compiler CVE-2015-1205 — chromium-browser: multiple unspecified vulnerabilities CVE-2015-1346 — chromium-browser: unspecified vulnerability in Google V8
🎯 Affected products18
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.src as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.src as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.src as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:40.0.2214.91-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (30)
- selfhttps://access.redhat.com/errata/RHSA-2015:0093
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://googlechromereleases.blogspot.com/2015/01/stable-update.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185202
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185203
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185204
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185205
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185206
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185208
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185209
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185210
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185211
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185212
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185213
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185214
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185215
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185216
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185217
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185218
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185219
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185220
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185221
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185222
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185223
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185224
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185225
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185226
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185229
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1185230
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0093.json