Red Hat Security Advisory

RHSA-2016:0429

chromium-browser security update

Released 2016-03-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-49.0.2623.87-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-49.0.2623.87-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-49.0.2623.87-1.el6

Fixes 3 records

TI-2016-01498 CVE-2016-1643 · GHSA-v435-cx7h-xxqw

The ImageInputType::ensurePrimaryContent function in…

MEDIUM 43

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which al…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02688 Published 2016-03-13 Fixed CWE-361

TI-2016-01500 CVE-2016-1645 · GHSA-gp2j-hgg9-c57v

Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in…

MEDIUM 42

Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect ca…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01981 Published 2016-03-13 Fixed CWE-119

TI-2016-01499 CVE-2016-1644 · GHSA-xg2h-74jh-cx48

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before…

MEDIUM 42

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-fre…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02064 Published 2016-03-13 Fixed