-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Important: chromium-browser security update
Advisory ID: RHSA-2016:1201-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://access.redhat.com/errata/RHSA-2016:1201
Issue date: 2016-06-02
CVE Names: CVE-2016-1696 CVE-2016-1697 CVE-2016-1698
CVE-2016-1699 CVE-2016-1700 CVE-2016-1701
CVE-2016-1702 CVE-2016-1703
=====================================================================
1. Summary:
An update for chromium-browser is now available for Red Hat Enterprise
Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 51.0.2704.79.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A
web page containing malicious content could cause Chromium to crash,
execute arbitrary code, or disclose sensitive information when visited by
the victim. (CVE-2016-1696, CVE-2016-1697, CVE-2016-1703, CVE-2016-1698,
CVE-2016-1699, CVE-2016-1700, CVE-2016-1701, CVE-2016-1702)
4. Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to
take effect.
5. Bugs fixed (https://bugzilla.redhat.com/):
1342001 - CVE-2016-1696 chromium-browser: cross-origin bypass in extension bindings
1342002 - CVE-2016-1697 chromium-browser: cross-origin bypass in blink
1342003 - CVE-2016-1698 chromium-browser: information leak in extension bindings
1342004 - CVE-2016-1699 chromium-browser: parameter sanitization failure in devtools
1342005 - CVE-2016-1700 chromium-browser: use-after-free in extensions
1342007 - CVE-2016-1701 chromium-browser: use-after-free in autofill
1342008 - CVE-2016-1702 chromium-browser: out-of-bounds read in skia
1342009 - CVE-2016-1703 chromium-browser: various fixes from internal audits
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
chromium-browser-51.0.2704.79-1.el6.i686.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.i686.rpm
x86_64:
chromium-browser-51.0.2704.79-1.el6.x86_64.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.x86_64.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
chromium-browser-51.0.2704.79-1.el6.i686.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.i686.rpm
x86_64:
chromium-browser-51.0.2704.79-1.el6.x86_64.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.x86_64.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
chromium-browser-51.0.2704.79-1.el6.i686.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.i686.rpm
x86_64:
chromium-browser-51.0.2704.79-1.el6.x86_64.rpm
chromium-browser-debuginfo-51.0.2704.79-1.el6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2016-1696
https://access.redhat.com/security/cve/CVE-2016-1697
https://access.redhat.com/security/cve/CVE-2016-1698
https://access.redhat.com/security/cve/CVE-2016-1699
https://access.redhat.com/security/cve/CVE-2016-1700
https://access.redhat.com/security/cve/CVE-2016-1701
https://access.redhat.com/security/cve/CVE-2016-1702
https://access.redhat.com/security/cve/CVE-2016-1703
https://access.redhat.com/security/updates/classification/#important
http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
8. Contact:
The Red Hat security contact is <[email protected]>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2016 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFXUICpXlSAg2UNWIIRAs1+AJ9Us24LC+Oop/AuL5JbTtWNW9e4dQCcC5/Y
lbqCxyEQCwttZzdF4gEzJDA=
=OPtc
-----END PGP SIGNATURE-----
--
Enterprise-watch-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/enterprise-watch-list
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.