RHSA-2017:3401CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
December 7, 2017
Last Modified
October 14, 2026

🔗 CVE IDs covered (19)

CVE-2017-15413 →CVE-2017-15416 →CVE-2017-15424 →CVE-2017-15409 →CVE-2017-15410 →CVE-2017-15417 →CVE-2017-15418 →CVE-2017-15420 →CVE-2017-15422 →CVE-2017-15426 →CVE-2017-15415 →CVE-2017-15423 →CVE-2017-15425 →CVE-2017-15427 →CVE-2017-15407 →CVE-2017-15408 →CVE-2017-15411 →CVE-2017-15412 →CVE-2017-15419 →

📋 Description

CVE-2017-15407 — chromium-browser: out of bounds write in quic CVE-2017-15408 — chromium-browser: heap buffer overflow in pdfium CVE-2017-15409 — chromium-browser: out of bounds write in skia CVE-2017-15410 — chromium-browser: use after free in pdfium CVE-2017-15411 — chromium-browser: use after free in pdfium CVE-2017-15412 — libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c CVE-2017-15413 — chromium-browser: type confusion in webassembly CVE-2017-15415 — chromium-browser: pointer information disclosure in ipc call CVE-2017-15416 — chromium-browser: out of bounds read in blink CVE-2017-15417 — chromium-browser: cross origin information disclosure in skia CVE-2017-15418 — chromium-browser: use of uninitialized value in skia CVE-2017-15419 — chromium-browser: cross origin leak of redirect url in blink CVE-2017-15420 — chromium-browser: url spoofing in omnibox CVE-2017-15422 — chromium-browser: integer overflow in icu CVE-2017-15423 — chromium-browser: issue with spake implementation in boringssl CVE-2017-15424 — chromium-browser: url spoof in omnibox CVE-2017-15425 — chromium-browser: url spoof in omnibox CVE-2017-15426 — chromium-browser: url spoof in omnibox CVE-2017-15427 — chromium-browser: insufficient blocking of javascript in omnibox

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (23)