RHSA-2017:0206HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
January 26, 2017
Last Modified
November 12, 2026

🔗 CVE IDs covered (21)

CVE-2017-5024 →CVE-2017-5026 →CVE-2017-5010 →CVE-2017-5014 →CVE-2017-5017 →CVE-2017-5023 →CVE-2017-5025 →CVE-2017-5008 →CVE-2017-5012 →CVE-2017-5016 →CVE-2017-5020 →CVE-2017-5019 →CVE-2017-5007 →CVE-2017-5009 →CVE-2017-5011 →CVE-2017-5015 →CVE-2017-5018 →CVE-2017-5021 →CVE-2017-5006 →CVE-2017-5013 →CVE-2017-5022 →

📋 Description

CVE-2017-5006 — chromium-browser: universal xss in blink CVE-2017-5007 — chromium-browser: universal xss in blink CVE-2017-5008 — chromium-browser: universal xss in blink CVE-2017-5009 — chromium-browser: out of bounds memory access in webrtc CVE-2017-5010 — chromium-browser: universal xss in blink CVE-2017-5011 — chromium-browser: unauthorised file access in devtools CVE-2017-5012 — chromium-browser: heap overflow in v8 CVE-2017-5013 — chromium-browser: address spoofing in omnibox CVE-2017-5014 — chromium-browser: heap overflow in skia CVE-2017-5015 — chromium-browser: address spoofing in omnibox CVE-2017-5016 — chromium-browser: ui spoofing in blink CVE-2017-5017 — chromium-browser: uninitialised memory access in webm video CVE-2017-5018 — chromium-browser: universal xss in chrome://apps CVE-2017-5019 — chromium-browser: use after free in renderer CVE-2017-5020 — chromium-browser: universal xss in chrome://downloads CVE-2017-5021 — chromium-browser: use after free in extensions CVE-2017-5022 — chromium-browser: bypass of content security policy in blink CVE-2017-5023 — chromium-browser: type confusion in metrics CVE-2017-5024 — chromium-browser: heap overflow in ffmpeg CVE-2017-5025 — chromium-browser: heap overflow in ffmpeg CVE-2017-5026 — chromium-browser: ui spoofing

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:56.0.2924.76-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (25)