RHSA-2016:2919HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
December 7, 2016
Last Modified
November 12, 2026

🔗 CVE IDs covered (27)

CVE-2016-5224 →CVE-2016-9651 →CVE-2016-5205 →CVE-2016-5210 →CVE-2016-5211 →CVE-2016-5220 →CVE-2016-5225 →CVE-2016-9650 →CVE-2016-9652 →CVE-2016-5216 →CVE-2016-5203 →CVE-2016-5204 →CVE-2016-5206 →CVE-2016-5207 →CVE-2016-5209 →CVE-2016-5215 →CVE-2016-5218 →CVE-2016-5208 →CVE-2016-5212 →CVE-2016-5217 →CVE-2016-5219 →CVE-2016-5221 →CVE-2016-5222 →CVE-2016-5223 →CVE-2016-5226 →CVE-2016-5213 →CVE-2016-5214 →

📋 Description

CVE-2016-5203 — chromium-browser: use after free in pdfium CVE-2016-5204 — chromium-browser: universal xss in blink CVE-2016-5205 — chromium-browser: universal xss in blink CVE-2016-5206 — chromium-browser: same-origin bypass in pdfium CVE-2016-5207 — chromium-browser: universal xss in blink CVE-2016-5208 — chromium-browser: universal xss in blink CVE-2016-5209 — chromium-browser: out of bounds write in blink CVE-2016-5210 — chromium-browser: out of bounds write in pdfium CVE-2016-5211 — chromium-browser: use after free in pdfium CVE-2016-5212 — chromium-browser: local file disclosure in devtools CVE-2016-5213 — chromium-browser: use after free in v8 CVE-2016-5214 — chromium-browser: file download protection bypass CVE-2016-5215 — chromium-browser: use after free in webaudio CVE-2016-5216 — chromium-browser: use after free in pdfium CVE-2016-5217 — chromium-browser: use of unvalidated data in pdfium CVE-2016-5218 — chromium-browser: address spoofing in omnibox CVE-2016-5219 — chromium-browser: use after free in v8 CVE-2016-5220 — chromium-browser: local file access in pdfium CVE-2016-5221 — chromium-browser: integer overflow in angle CVE-2016-5222 — chromium-browser: address spoofing in omnibox CVE-2016-5223 — chromium-browser: integer overflow in pdfium CVE-2016-5224 — chromium-browser: same-origin bypass in svg CVE-2016-5225 — chromium-browser: csp bypass in blink CVE-2016-5226 — chromium-browser: limited xss in blink CVE-2016-9650 — chromium-browser: csp referrer disclosure CVE-2016-9651 — chromium-browser: private property access in v8 CVE-2016-9652 — chromium-browser: various fixes from internal audits

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (31)