Red Hat Security Advisory

RHSA-2016:2718

chromium-browser security update

Released 2016-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-54.0.2840.100-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-54.0.2840.100-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-54.0.2840.100-1.el6

Fixes 4 records

TI-2016-04503 CVE-2016-5202 · GHSA-mwf3-rpq5-x552

Incorrect permission assignment in chromium-browser

MEDIUM 41

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which cau…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00791 Published 2019-10-25 Fixed in 54.0.2840.100 CWE-732

TI-2016-04501 CVE-2016-5200 · GHSA-hjwp-q5hc-9xxq

Memory corruption in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for…

MEDIUM 41

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially ex…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01567 Published 2017-01-19 Fixed CWE-119

TI-2016-04500 CVE-2016-5199 · GHSA-5mc4-xjch-jc3r

Memory corruption in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for…

MEDIUM 41

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remo…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01384 Published 2017-01-19 Fixed CWE-119

TI-2016-04502 CVE-2016-5201 · GHSA-6jw7-vq8x-9cjf

Information disclosure in Google Chrome prior to 54.0.2840.100 for Linux, and…

LOW 31

A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01204 Published 2017-01-19 Fixed CWE-200