Red Hat Security Advisory

RHSA-2015:1841

chromium-browser security update

Released 2015-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-45.0.2454.101-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-45.0.2454.101-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-45.0.2454.101-1.el6

Fixes 3 records

TI-2015-01181 CVE-2015-1302 · GHSA-5f5g-9jr3-xpmv

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting…

LOW 37

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01864 Published 2015-11-11 Fixed CWE-20

TI-2015-01183 CVE-2015-1304 · GHSA-5f4w-ffvr-g82j

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not…

LOW 36

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01757 Published 2015-10-12 Fixed CWE-284

TI-2015-01182 CVE-2015-1303 · GHSA-67j3-3gmx-23jq

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101…

LOW 36

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01729 Published 2015-10-12 Fixed CWE-20