RHSA-2017:2676HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
September 12, 2017
Last Modified
November 12, 2026

🔗 CVE IDs covered (10)

CVE-2017-5112 →CVE-2017-5113 →CVE-2017-5115 →CVE-2017-5116 →CVE-2017-5117 →CVE-2017-5118 →CVE-2017-5120 →CVE-2017-5111 →CVE-2017-5114 →CVE-2017-5119 →

📋 Description

CVE-2017-5111 — chromium-browser: use after free in pdfium CVE-2017-5112 — chromium-browser: heap buffer overflow in webgl CVE-2017-5113 — chromium-browser: heap buffer overflow in skia CVE-2017-5114 — chromium-browser: memory lifecycle issue in pdfium CVE-2017-5115 — chromium-browser: type confusion in v8 CVE-2017-5116 — chromium-browser: type confusion in v8 CVE-2017-5117 — chromium-browser: use of uninitialized value in skia CVE-2017-5118 — chromium-browser: bypass of content security policy in blink CVE-2017-5119 — chromium-browser: use of uninitialized value in skia CVE-2017-5120 — chromium-browser: potential https downgrade during redirect navigation

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:61.0.3163.79-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (14)