rhsa-2016_1190
Vulnerability from csaf_redhat
Published
2016-06-01 10:50
Modified
2024-11-14 19:02
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 51.0.2704.63.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1672, CVE-2016-1673, CVE-2016-1674, CVE-2016-1675, CVE-2016-1676, CVE-2016-1678, CVE-2016-1679, CVE-2016-1680, CVE-2016-1681, CVE-2016-1695, CVE-2016-1677, CVE-2016-1682, CVE-2016-1683, CVE-2016-1684, CVE-2016-1685, CVE-2016-1686, CVE-2016-1687, CVE-2016-1688, CVE-2016-1689, CVE-2016-1690, CVE-2016-1691, CVE-2016-1692, CVE-2016-1693, CVE-2016-1694)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 51.0.2704.63.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1672, CVE-2016-1673, CVE-2016-1674, CVE-2016-1675, CVE-2016-1676, CVE-2016-1678, CVE-2016-1679, CVE-2016-1680, CVE-2016-1681, CVE-2016-1695, CVE-2016-1677, CVE-2016-1682, CVE-2016-1683, CVE-2016-1684, CVE-2016-1685, CVE-2016-1686, CVE-2016-1687, CVE-2016-1688, CVE-2016-1689, CVE-2016-1690, CVE-2016-1691, CVE-2016-1692, CVE-2016-1693, CVE-2016-1694)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1190",
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "https://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
},
{
"category": "external",
"summary": "1340005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340005"
},
{
"category": "external",
"summary": "1340006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340006"
},
{
"category": "external",
"summary": "1340007",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340007"
},
{
"category": "external",
"summary": "1340008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340008"
},
{
"category": "external",
"summary": "1340009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340009"
},
{
"category": "external",
"summary": "1340010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340010"
},
{
"category": "external",
"summary": "1340011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340011"
},
{
"category": "external",
"summary": "1340012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340012"
},
{
"category": "external",
"summary": "1340013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340013"
},
{
"category": "external",
"summary": "1340014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340014"
},
{
"category": "external",
"summary": "1340015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340015"
},
{
"category": "external",
"summary": "1340016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340016"
},
{
"category": "external",
"summary": "1340017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017"
},
{
"category": "external",
"summary": "1340018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340018"
},
{
"category": "external",
"summary": "1340019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340019"
},
{
"category": "external",
"summary": "1340021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340021"
},
{
"category": "external",
"summary": "1340022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340022"
},
{
"category": "external",
"summary": "1340023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340023"
},
{
"category": "external",
"summary": "1340024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340024"
},
{
"category": "external",
"summary": "1340026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340026"
},
{
"category": "external",
"summary": "1340027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340027"
},
{
"category": "external",
"summary": "1340028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340028"
},
{
"category": "external",
"summary": "1340029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340029"
},
{
"category": "external",
"summary": "1340030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340030"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1190.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2024-11-14T19:02:47+00:00",
"generator": {
"date": "2024-11-14T19:02:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:1190",
"initial_release_date": "2016-06-01T10:50:06+00:00",
"revision_history": [
{
"date": "2016-06-01T10:50:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-06-01T10:50:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T19:02:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"product": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"product_id": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@51.0.2704.63-1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"product": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"product_id": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@51.0.2704.63-1.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"product": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"product_id": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@51.0.2704.63-1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"product_id": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@51.0.2704.63-1.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1672",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340005"
}
],
"notes": [
{
"category": "description",
"text": "The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: cross-origin bypass in extension bindings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1672"
},
{
"category": "external",
"summary": "RHBZ#1340005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1672",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1672"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1672",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1672"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: cross-origin bypass in extension bindings"
},
{
"cve": "CVE-2016-1673",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340006"
}
],
"notes": [
{
"category": "description",
"text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: cross-origin bypass in blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1673"
},
{
"category": "external",
"summary": "RHBZ#1340006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1673",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1673"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: cross-origin bypass in blink"
},
{
"cve": "CVE-2016-1674",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340007"
}
],
"notes": [
{
"category": "description",
"text": "The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: cross-origin bypass in extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1674"
},
{
"category": "external",
"summary": "RHBZ#1340007",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340007"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1674",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1674"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: cross-origin bypass in extensions"
},
{
"cve": "CVE-2016-1675",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340008"
}
],
"notes": [
{
"category": "description",
"text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: cross-origin bypass in blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1675"
},
{
"category": "external",
"summary": "RHBZ#1340008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1675",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1675"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: cross-origin bypass in blink"
},
{
"cve": "CVE-2016-1676",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340009"
}
],
"notes": [
{
"category": "description",
"text": "extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: cross-origin bypass in extension bindings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1676"
},
{
"category": "external",
"summary": "RHBZ#1340009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1676",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1676"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: cross-origin bypass in extension bindings"
},
{
"cve": "CVE-2016-1677",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340010"
}
],
"notes": [
{
"category": "description",
"text": "uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: type confusion in v8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1677"
},
{
"category": "external",
"summary": "RHBZ#1340010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1677",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1677"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: type confusion in v8"
},
{
"cve": "CVE-2016-1678",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340011"
}
],
"notes": [
{
"category": "description",
"text": "objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap overflow in v8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1678"
},
{
"category": "external",
"summary": "RHBZ#1340011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340011"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1678",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1678"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1678",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1678"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: heap overflow in v8"
},
{
"cve": "CVE-2016-1679",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340012"
}
],
"notes": [
{
"category": "description",
"text": "The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap use-after-free in v8 bindings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1679"
},
{
"category": "external",
"summary": "RHBZ#1340012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340012"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1679"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: heap use-after-free in v8 bindings"
},
{
"cve": "CVE-2016-1680",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340013"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap use-after-free in skia",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1680"
},
{
"category": "external",
"summary": "RHBZ#1340013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1680",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1680"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: heap use-after-free in skia"
},
{
"cve": "CVE-2016-1681",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340014"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap overflow in pdfium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1681"
},
{
"category": "external",
"summary": "RHBZ#1340014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340014"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1681",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1681"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: heap overflow in pdfium"
},
{
"cve": "CVE-2016-1682",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340015"
}
],
"notes": [
{
"category": "description",
"text": "The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: csp bypass for serviceworker",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1682"
},
{
"category": "external",
"summary": "RHBZ#1340015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1682",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1682"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1682",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1682"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: csp bypass for serviceworker"
},
{
"cve": "CVE-2016-1683",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340016"
}
],
"notes": [
{
"category": "description",
"text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: out-of-bounds access in libxslt",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1683"
},
{
"category": "external",
"summary": "RHBZ#1340016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340016"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1683",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1683"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1683",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1683"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: out-of-bounds access in libxslt"
},
{
"cve": "CVE-2016-1684",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340017"
}
],
"notes": [
{
"category": "description",
"text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: integer overflow in libxslt",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1684"
},
{
"category": "external",
"summary": "RHBZ#1340017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1684",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1684"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: integer overflow in libxslt"
},
{
"cve": "CVE-2016-1685",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340018"
}
],
"notes": [
{
"category": "description",
"text": "core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: out-of-bounds read in pdfium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1685"
},
{
"category": "external",
"summary": "RHBZ#1340018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1685",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1685"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1685",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1685"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: out-of-bounds read in pdfium"
},
{
"cve": "CVE-2016-1686",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340019"
}
],
"notes": [
{
"category": "description",
"text": "The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: out-of-bounds read in pdfium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1686"
},
{
"category": "external",
"summary": "RHBZ#1340019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1686",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1686"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1686",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1686"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: out-of-bounds read in pdfium"
},
{
"cve": "CVE-2016-1687",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340021"
}
],
"notes": [
{
"category": "description",
"text": "The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: information leak in extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1687"
},
{
"category": "external",
"summary": "RHBZ#1340021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340021"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1687",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1687"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1687",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1687"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: information leak in extensions"
},
{
"cve": "CVE-2016-1688",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340022"
}
],
"notes": [
{
"category": "description",
"text": "The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: out-of-bounds read in v8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1688"
},
{
"category": "external",
"summary": "RHBZ#1340022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1688",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1688"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1688",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1688"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: out-of-bounds read in v8"
},
{
"cve": "CVE-2016-1689",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340023"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap buffer overflow in media",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1689"
},
{
"category": "external",
"summary": "RHBZ#1340023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340023"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1689",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1689"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: heap buffer overflow in media"
},
{
"cve": "CVE-2016-1690",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340024"
}
],
"notes": [
{
"category": "description",
"text": "The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap use-after-free in autofill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1690"
},
{
"category": "external",
"summary": "RHBZ#1340024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1690",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1690"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1690",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1690"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: heap use-after-free in autofill"
},
{
"cve": "CVE-2016-1691",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340026"
}
],
"notes": [
{
"category": "description",
"text": "Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap buffer-overflow in skia",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1691"
},
{
"category": "external",
"summary": "RHBZ#1340026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1691",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1691"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: heap buffer-overflow in skia"
},
{
"cve": "CVE-2016-1692",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340027"
}
],
"notes": [
{
"category": "description",
"text": "WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: limited cross-origin bypass in serviceworker",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1692"
},
{
"category": "external",
"summary": "RHBZ#1340027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340027"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1692",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1692"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: limited cross-origin bypass in serviceworker"
},
{
"cve": "CVE-2016-1693",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340028"
}
],
"notes": [
{
"category": "description",
"text": "browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: http download of software removal tool",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1693"
},
{
"category": "external",
"summary": "RHBZ#1340028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340028"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1693",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1693"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: http download of software removal tool"
},
{
"cve": "CVE-2016-1694",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340029"
}
],
"notes": [
{
"category": "description",
"text": "browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: hpkp pins removed on cache clearance",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1694"
},
{
"category": "external",
"summary": "RHBZ#1340029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340029"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1694",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1694"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1694",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1694"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: hpkp pins removed on cache clearance"
},
{
"cve": "CVE-2016-1695",
"discovery_date": "2016-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1340030"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: various fixes from internal audits",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1695"
},
{
"category": "external",
"summary": "RHBZ#1340030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1695",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1695"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html"
}
],
"release_date": "2016-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-01T10:50:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686",
"6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: various fixes from internal audits"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.