Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (16)
📋 Description
CVE-2017-5070 — chromium-browser: type confusion in v8 CVE-2017-5071 — chromium-browser: out of bounds read in v8 CVE-2017-5072 — chromium-browser: address spoofing in omnibox CVE-2017-5073 — chromium-browser: use after free in print preview CVE-2017-5074 — chromium-browser: use after free in apps bluetooth CVE-2017-5075 — chromium-browser: information leak in csp reporting CVE-2017-5076 — chromium-browser: address spoofing in omnibox CVE-2017-5077 — chromium-browser: heap buffer overflow in skia CVE-2017-5078 — chromium-browser: possible command injection in mailto handling CVE-2017-5079 — chromium-browser: ui spoofing in blink CVE-2017-5080 — chromium-browser: use after free in credit card autofill CVE-2017-5081 — chromium-browser: extension verification bypass CVE-2017-5082 — chromium-browser: insufficient hardening in credit card editor CVE-2017-5083 — chromium-browser: ui spoofing in blink CVE-2017-5085 — chromium-browser: inappropriate javascript execution on webui pages CVE-2017-5086 — chromium-browser: address spoofing in omnibox
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (20)
- selfhttps://access.redhat.com/errata/RHSA-2017:1399
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459021
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459022
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459023
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459024
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459025
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459027
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459028
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459029
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459030
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459031
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459032
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459033
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459034
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459035
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459036
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1459037
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1399.json