Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (20)
📋 Description
CVE-2015-1270 — ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89 CVE-2015-1271 — chromium-browser: Heap-buffer-overflow in pdfium CVE-2015-1272 — chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified CVE-2015-1273 — chromium-browser: Heap-buffer-overflow in pdfium. CVE-2015-1274 — chromium-browser: Settings allowed executable files to run immediately after download in unsepcified CVE-2015-1276 — chromium-browser: Use-after-free in IndexedDB. CVE-2015-1277 — chromium-browser: Use-after-free in accessibility. CVE-2015-1278 — chromium-browser: URL spoofing using pdf files in unspecified CVE-2015-1279 — chromium-browser: Heap-buffer-overflow in pdfium. CVE-2015-1280 — chromium-browser: Memory corruption in skia CVE-2015-1281 — chromium-browser: CSP bypass in unspecified component CVE-2015-1282 — chromium-browser: Use-after-free in pdfium. CVE-2015-1283 — chromium-browser: Heap-buffer-overflow in expat. CVE-2015-1284 — chromium-browser: Use-after-free in blink. CVE-2015-1285 — chromium-browser: Information leak in XSS auditor. CVE-2015-1286 — chromium-browser: UXSS in blink. CVE-2015-1287 — chromium-browser: SOP bypass with CSS in unspecified CVE-2015-1288 — chromium-browser: Spell checking dictionaries fetched over HTTP in unspecified CVE-2015-1289 — chromium-browser: Various fixes from internal audits, fuzzing and other initiatives CVE-2015-5605 — chromium-browser: v8 denial of service
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:44.0.2403.89-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (23)
- selfhttps://access.redhat.com/errata/RHSA-2015:1499
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245436
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245574
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245575
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245576
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245577
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245580
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245581
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245582
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245583
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245585
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245586
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245587
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245588
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245589
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245590
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245591
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245592
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245593
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1245955
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1499.json