Red Hat Security Advisory

RHSA-2016:1080

chromium-browser security update

Released 2016-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-50.0.2661.102-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-50.0.2661.102-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-50.0.2661.102-1.el6

Fixes 4 records

TI-2016-01524 CVE-2016-1669 · GHSA-7wg6-6952-3vfv

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome…

MEDIUM 45

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to caus…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04262 Published 2016-05-14 Partial fix CWE-119

TI-2016-01522 CVE-2016-1667 · GHSA-q74m-chqj-h6wx

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM…

MEDIUM 42

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption oper…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02088 Published 2016-05-14 Fixed CWE-284

TI-2016-01523 CVE-2016-1668 · GHSA-v4qm-ff8x-gfhm

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8…

MEDIUM 41

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2016-05-14 Fixed CWE-284

TI-2016-01525 CVE-2016-1670 · GHSA-5975-jwq3-jmm6

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in…

LOW 26

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requ…

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00943 Published 2016-05-14 Fixed CWE-362