Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-6761
Vulnerability from cvelistv5
Published
2015-10-15 10:00
Modified
2024-08-06 07:29
Severity ?
EPSS score ?
Summary
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T07:29:24.808Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { name: "[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://codereview.chromium.org/1376913003", }, { name: "DSA-3376", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2015/dsa-3376", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { name: "77073", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/77073", }, { name: "GLSA-201603-09", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201603-09", }, { name: "1033816", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1033816", }, { name: "USN-2770-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-2770-1", }, { name: "RHSA-2015:1912", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { name: "USN-2770-2", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-2770-2", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2015-10-13T00:00:00", descriptions: [ { lang: "en", value: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-12-21T10:57:01", orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", shortName: "Chrome", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { name: "[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://codereview.chromium.org/1376913003", }, { name: "DSA-3376", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2015/dsa-3376", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { name: "77073", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/77073", }, { name: "GLSA-201603-09", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201603-09", }, { name: "1033816", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1033816", }, { name: "USN-2770-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "http://www.ubuntu.com/usn/USN-2770-1", }, { name: "RHSA-2015:1912", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { name: "USN-2770-2", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "http://www.ubuntu.com/usn/USN-2770-2", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2015-6761", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", refsource: "CONFIRM", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { name: "[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update", refsource: "MLIST", url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { name: "https://codereview.chromium.org/1376913003", refsource: "CONFIRM", url: "https://codereview.chromium.org/1376913003", }, { name: "DSA-3376", refsource: "DEBIAN", url: "http://www.debian.org/security/2015/dsa-3376", }, { name: "https://code.google.com/p/chromium/issues/detail?id=532967", refsource: "CONFIRM", url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { name: "https://code.google.com/p/chromium/issues/detail?id=447860", refsource: "CONFIRM", url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { name: "77073", refsource: "BID", url: "http://www.securityfocus.com/bid/77073", }, { name: "GLSA-201603-09", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201603-09", }, { name: "1033816", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1033816", }, { name: "USN-2770-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2770-1", }, { name: "RHSA-2015:1912", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { name: "USN-2770-2", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2770-2", }, { name: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", refsource: "CONFIRM", url: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", assignerShortName: "Chrome", cveId: "CVE-2015-6761", datePublished: "2015-10-15T10:00:00", dateReserved: "2015-08-31T00:00:00", dateUpdated: "2024-08-06T07:29:24.808Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2015-6761\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2015-10-15T10:59:06.920\",\"lastModified\":\"2024-11-21T02:35:36.377\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.\"},{\"lang\":\"es\",\"value\":\"La función update_dimensions en libavcodec/vp8.c en FFmpeg hasta la versión 2.8.1, como se utiliza en Google Chrome en versiones anteriores a 46.0.2490.71 y otros productos, confía en una cuenta de partición de coeficiente durante una operación multi-hilo, lo que permite a atacantes remotos provocar una denegación de servicio (condición de carrera y corrupción de memoria) o posiblemente tener otro impacto no especificado a través de un archivo WebM manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.8.1\",\"matchCriteriaId\":\"EFE7A282-4C23-4443-BEB6-FA0EB4AE19B8\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"45.0.2454.101\",\"matchCriteriaId\":\"9908D930-D4BE-4D3A-8503-F162D72C51C2\"}]}]}],\"references\":[{\"url\":\"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1912.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3376\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securityfocus.com/bid/77073\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securitytracker.com/id/1033816\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2770-1\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2770-2\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=447860\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=532967\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://codereview.chromium.org/1376913003\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/201603-09\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1912.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3376\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/77073\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1033816\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2770-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2770-2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=447860\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=532967\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://codereview.chromium.org/1376913003\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201603-09\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
fkie_cve-2015-6761
Vulnerability from fkie_nvd
Published
2015-10-15 10:59
Modified
2024-11-21 02:35
Severity ?
Summary
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
References
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*", matchCriteriaId: "EFE7A282-4C23-4443-BEB6-FA0EB4AE19B8", versionEndIncluding: "2.8.1", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", matchCriteriaId: "9908D930-D4BE-4D3A-8503-F162D72C51C2", versionEndIncluding: "45.0.2454.101", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", }, { lang: "es", value: "La función update_dimensions en libavcodec/vp8.c en FFmpeg hasta la versión 2.8.1, como se utiliza en Google Chrome en versiones anteriores a 46.0.2490.71 y otros productos, confía en una cuenta de partición de coeficiente durante una operación multi-hilo, lo que permite a atacantes remotos provocar una denegación de servicio (condición de carrera y corrupción de memoria) o posiblemente tener otro impacto no especificado a través de un archivo WebM manipulado.", }, ], id: "CVE-2015-6761", lastModified: "2024-11-21T02:35:36.377", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2015-10-15T10:59:06.920", references: [ { source: "chrome-cve-admin@google.com", url: "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, { source: "chrome-cve-admin@google.com", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { source: "chrome-cve-admin@google.com", url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { source: "chrome-cve-admin@google.com", url: "http://www.debian.org/security/2015/dsa-3376", }, { source: "chrome-cve-admin@google.com", url: "http://www.securityfocus.com/bid/77073", }, { source: "chrome-cve-admin@google.com", url: "http://www.securitytracker.com/id/1033816", }, { source: "chrome-cve-admin@google.com", url: "http://www.ubuntu.com/usn/USN-2770-1", }, { source: "chrome-cve-admin@google.com", url: "http://www.ubuntu.com/usn/USN-2770-2", }, { source: "chrome-cve-admin@google.com", url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { source: "chrome-cve-admin@google.com", url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { source: "chrome-cve-admin@google.com", url: "https://codereview.chromium.org/1376913003", }, { source: "chrome-cve-admin@google.com", url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { source: "chrome-cve-admin@google.com", url: "https://security.gentoo.org/glsa/201603-09", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2015/dsa-3376", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/77073", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id/1033816", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-2770-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-2770-2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://codereview.chromium.org/1376913003", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201603-09", }, ], sourceIdentifier: "chrome-cve-admin@google.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-362", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
rhsa-2015_1912
Vulnerability from csaf_redhat
Published
2015-10-15 21:09
Modified
2024-11-14 15:30
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
Updated chromium-browser packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Chromium to crash, execute
arbitrary code, or disclose sensitive information when visited by the
victim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,
CVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)
All Chromium users should upgrade to these updated packages, which contain
Chromium version 46.0.2490.71, which corrects these issues. After
installing the update, Chromium must be restarted for the changes to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated chromium-browser packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Chromium to crash, execute\narbitrary code, or disclose sensitive information when visited by the\nvictim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,\nCVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)\n\nAll Chromium users should upgrade to these updated packages, which contain\nChromium version 46.0.2490.71, which corrects these issues. After\ninstalling the update, Chromium must be restarted for the changes to take \neffect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1912", url: "https://access.redhat.com/errata/RHSA-2015:1912", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { category: "external", summary: "1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1912.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T15:30:47+00:00", generator: { date: "2024-11-14T15:30:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1912", initial_release_date: "2015-10-15T21:09:38+00:00", revision_history: [ { date: "2015-10-15T21:09:38+00:00", number: "1", summary: "Initial version", }, { date: "2015-10-15T21:09:38+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T15:30:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-6755", cwe: { id: "CWE-345", name: "Insufficient Verification of Data Authenticity", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271480", }, ], notes: [ { category: "description", text: "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: cross-origin bypass in Blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6755", }, { category: "external", summary: "RHBZ#1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6755", url: "https://www.cve.org/CVERecord?id=CVE-2015-6755", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: cross-origin bypass in Blink", }, { cve: "CVE-2015-6756", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271483", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use-after-free in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6756", }, { category: "external", summary: "RHBZ#1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6756", url: "https://www.cve.org/CVERecord?id=CVE-2015-6756", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use-after-free in PDFium", }, { cve: "CVE-2015-6757", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271553", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Use-after-free in ServiceWorker", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6757", }, { category: "external", summary: "RHBZ#1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6757", url: "https://www.cve.org/CVERecord?id=CVE-2015-6757", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Use-after-free in ServiceWorker", }, { cve: "CVE-2015-6758", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271554", }, ], notes: [ { category: "description", text: "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Bad-cast in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6758", }, { category: "external", summary: "RHBZ#1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6758", url: "https://www.cve.org/CVERecord?id=CVE-2015-6758", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Bad-cast in PDFium", }, { cve: "CVE-2015-6759", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271555", }, ], notes: [ { category: "description", text: "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Information leakage in LocalStorage", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6759", }, { category: "external", summary: "RHBZ#1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6759", url: "https://www.cve.org/CVERecord?id=CVE-2015-6759", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Information leakage in LocalStorage", }, { cve: "CVE-2015-6760", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271556", }, ], notes: [ { category: "description", text: "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Improper error handling in libANGLE", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6760", }, { category: "external", summary: "RHBZ#1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6760", url: "https://www.cve.org/CVERecord?id=CVE-2015-6760", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Improper error handling in libANGLE", }, { cve: "CVE-2015-6761", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271557", }, ], notes: [ { category: "description", text: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Memory corruption in FFMpeg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6761", }, { category: "external", summary: "RHBZ#1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6761", url: "https://www.cve.org/CVERecord?id=CVE-2015-6761", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Memory corruption in FFMpeg", }, { cve: "CVE-2015-6762", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271558", }, ], notes: [ { category: "description", text: "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: CORS bypass in CSS fonts", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6762", }, { category: "external", summary: "RHBZ#1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6762", url: "https://www.cve.org/CVERecord?id=CVE-2015-6762", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: CORS bypass in CSS fonts", }, { cve: "CVE-2015-6763", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271559", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6763", }, { category: "external", summary: "RHBZ#1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6763", url: "https://www.cve.org/CVERecord?id=CVE-2015-6763", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
RHSA-2015:1912
Vulnerability from csaf_redhat
Published
2015-10-15 21:09
Modified
2024-11-14 15:30
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
Updated chromium-browser packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Chromium to crash, execute
arbitrary code, or disclose sensitive information when visited by the
victim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,
CVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)
All Chromium users should upgrade to these updated packages, which contain
Chromium version 46.0.2490.71, which corrects these issues. After
installing the update, Chromium must be restarted for the changes to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated chromium-browser packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Chromium to crash, execute\narbitrary code, or disclose sensitive information when visited by the\nvictim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,\nCVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)\n\nAll Chromium users should upgrade to these updated packages, which contain\nChromium version 46.0.2490.71, which corrects these issues. After\ninstalling the update, Chromium must be restarted for the changes to take \neffect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1912", url: "https://access.redhat.com/errata/RHSA-2015:1912", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { category: "external", summary: "1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1912.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T15:30:47+00:00", generator: { date: "2024-11-14T15:30:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1912", initial_release_date: "2015-10-15T21:09:38+00:00", revision_history: [ { date: "2015-10-15T21:09:38+00:00", number: "1", summary: "Initial version", }, { date: "2015-10-15T21:09:38+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T15:30:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-6755", cwe: { id: "CWE-345", name: "Insufficient Verification of Data Authenticity", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271480", }, ], notes: [ { category: "description", text: "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: cross-origin bypass in Blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6755", }, { category: "external", summary: "RHBZ#1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6755", url: "https://www.cve.org/CVERecord?id=CVE-2015-6755", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: cross-origin bypass in Blink", }, { cve: "CVE-2015-6756", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271483", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use-after-free in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6756", }, { category: "external", summary: "RHBZ#1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6756", url: "https://www.cve.org/CVERecord?id=CVE-2015-6756", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use-after-free in PDFium", }, { cve: "CVE-2015-6757", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271553", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Use-after-free in ServiceWorker", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6757", }, { category: "external", summary: "RHBZ#1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6757", url: "https://www.cve.org/CVERecord?id=CVE-2015-6757", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Use-after-free in ServiceWorker", }, { cve: "CVE-2015-6758", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271554", }, ], notes: [ { category: "description", text: "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Bad-cast in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6758", }, { category: "external", summary: "RHBZ#1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6758", url: "https://www.cve.org/CVERecord?id=CVE-2015-6758", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Bad-cast in PDFium", }, { cve: "CVE-2015-6759", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271555", }, ], notes: [ { category: "description", text: "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Information leakage in LocalStorage", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6759", }, { category: "external", summary: "RHBZ#1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6759", url: "https://www.cve.org/CVERecord?id=CVE-2015-6759", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Information leakage in LocalStorage", }, { cve: "CVE-2015-6760", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271556", }, ], notes: [ { category: "description", text: "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Improper error handling in libANGLE", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6760", }, { category: "external", summary: "RHBZ#1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6760", url: "https://www.cve.org/CVERecord?id=CVE-2015-6760", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Improper error handling in libANGLE", }, { cve: "CVE-2015-6761", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271557", }, ], notes: [ { category: "description", text: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Memory corruption in FFMpeg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6761", }, { category: "external", summary: "RHBZ#1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6761", url: "https://www.cve.org/CVERecord?id=CVE-2015-6761", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Memory corruption in FFMpeg", }, { cve: "CVE-2015-6762", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271558", }, ], notes: [ { category: "description", text: "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: CORS bypass in CSS fonts", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6762", }, { category: "external", summary: "RHBZ#1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6762", url: "https://www.cve.org/CVERecord?id=CVE-2015-6762", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: CORS bypass in CSS fonts", }, { cve: "CVE-2015-6763", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271559", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6763", }, { category: "external", summary: "RHBZ#1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6763", url: "https://www.cve.org/CVERecord?id=CVE-2015-6763", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
rhsa-2015:1912
Vulnerability from csaf_redhat
Published
2015-10-15 21:09
Modified
2024-11-14 15:30
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
Updated chromium-browser packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Chromium to crash, execute
arbitrary code, or disclose sensitive information when visited by the
victim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,
CVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)
All Chromium users should upgrade to these updated packages, which contain
Chromium version 46.0.2490.71, which corrects these issues. After
installing the update, Chromium must be restarted for the changes to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated chromium-browser packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Chromium to crash, execute\narbitrary code, or disclose sensitive information when visited by the\nvictim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,\nCVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)\n\nAll Chromium users should upgrade to these updated packages, which contain\nChromium version 46.0.2490.71, which corrects these issues. After\ninstalling the update, Chromium must be restarted for the changes to take \neffect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1912", url: "https://access.redhat.com/errata/RHSA-2015:1912", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { category: "external", summary: "1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1912.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T15:30:47+00:00", generator: { date: "2024-11-14T15:30:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1912", initial_release_date: "2015-10-15T21:09:38+00:00", revision_history: [ { date: "2015-10-15T21:09:38+00:00", number: "1", summary: "Initial version", }, { date: "2015-10-15T21:09:38+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T15:30:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_id: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.7.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-6755", cwe: { id: "CWE-345", name: "Insufficient Verification of Data Authenticity", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271480", }, ], notes: [ { category: "description", text: "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: cross-origin bypass in Blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6755", }, { category: "external", summary: "RHBZ#1271480", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271480", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6755", url: "https://www.cve.org/CVERecord?id=CVE-2015-6755", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: cross-origin bypass in Blink", }, { cve: "CVE-2015-6756", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271483", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use-after-free in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6756", }, { category: "external", summary: "RHBZ#1271483", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271483", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6756", url: "https://www.cve.org/CVERecord?id=CVE-2015-6756", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use-after-free in PDFium", }, { cve: "CVE-2015-6757", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271553", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Use-after-free in ServiceWorker", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6757", }, { category: "external", summary: "RHBZ#1271553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6757", url: "https://www.cve.org/CVERecord?id=CVE-2015-6757", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Use-after-free in ServiceWorker", }, { cve: "CVE-2015-6758", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271554", }, ], notes: [ { category: "description", text: "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Bad-cast in PDFium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6758", }, { category: "external", summary: "RHBZ#1271554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6758", url: "https://www.cve.org/CVERecord?id=CVE-2015-6758", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: Bad-cast in PDFium", }, { cve: "CVE-2015-6759", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271555", }, ], notes: [ { category: "description", text: "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Information leakage in LocalStorage", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6759", }, { category: "external", summary: "RHBZ#1271555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6759", url: "https://www.cve.org/CVERecord?id=CVE-2015-6759", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Information leakage in LocalStorage", }, { cve: "CVE-2015-6760", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271556", }, ], notes: [ { category: "description", text: "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Improper error handling in libANGLE", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6760", }, { category: "external", summary: "RHBZ#1271556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6760", url: "https://www.cve.org/CVERecord?id=CVE-2015-6760", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Improper error handling in libANGLE", }, { cve: "CVE-2015-6761", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271557", }, ], notes: [ { category: "description", text: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: Memory corruption in FFMpeg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6761", }, { category: "external", summary: "RHBZ#1271557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6761", url: "https://www.cve.org/CVERecord?id=CVE-2015-6761", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 6.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: Memory corruption in FFMpeg", }, { cve: "CVE-2015-6762", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271558", }, ], notes: [ { category: "description", text: "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: CORS bypass in CSS fonts", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6762", }, { category: "external", summary: "RHBZ#1271558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6762", url: "https://www.cve.org/CVERecord?id=CVE-2015-6762", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: CORS bypass in CSS fonts", }, { cve: "CVE-2015-6763", discovery_date: "2015-10-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1271559", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-6763", }, { category: "external", summary: "RHBZ#1271559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-6763", url: "https://www.cve.org/CVERecord?id=CVE-2015-6763", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", }, { category: "external", summary: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, ], release_date: "2015-10-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-10-15T21:09:38+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1912", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686", "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
gsd-2015-6761
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
Aliases
Aliases
{ GSD: { alias: "CVE-2015-6761", description: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", id: "GSD-2015-6761", references: [ "https://www.suse.com/security/cve/CVE-2015-6761.html", "https://www.debian.org/security/2015/dsa-3376", "https://access.redhat.com/errata/RHSA-2015:1912", "https://ubuntu.com/security/CVE-2015-6761", "https://advisories.mageia.org/CVE-2015-6761.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2015-6761", ], details: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", id: "GSD-2015-6761", modified: "2023-12-13T01:20:04.791273Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2015-6761", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", refsource: "CONFIRM", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { name: "[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update", refsource: "MLIST", url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { name: "https://codereview.chromium.org/1376913003", refsource: "CONFIRM", url: "https://codereview.chromium.org/1376913003", }, { name: "DSA-3376", refsource: "DEBIAN", url: "http://www.debian.org/security/2015/dsa-3376", }, { name: "https://code.google.com/p/chromium/issues/detail?id=532967", refsource: "CONFIRM", url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { name: "https://code.google.com/p/chromium/issues/detail?id=447860", refsource: "CONFIRM", url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { name: "77073", refsource: "BID", url: "http://www.securityfocus.com/bid/77073", }, { name: "GLSA-201603-09", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201603-09", }, { name: "1033816", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1033816", }, { name: "USN-2770-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2770-1", }, { name: "RHSA-2015:1912", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { name: "USN-2770-2", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2770-2", }, { name: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", refsource: "CONFIRM", url: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "2.8.1", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "45.0.2454.101", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2015-6761", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-362", }, ], }, ], }, references: { reference_data: [ { name: "https://code.google.com/p/chromium/issues/detail?id=532967", refsource: "CONFIRM", tags: [], url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { name: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", refsource: "CONFIRM", tags: [ "Patch", "Vendor Advisory", ], url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { name: "https://code.google.com/p/chromium/issues/detail?id=447860", refsource: "CONFIRM", tags: [], url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { name: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", refsource: "CONFIRM", tags: [], url: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, { name: "https://codereview.chromium.org/1376913003", refsource: "CONFIRM", tags: [], url: "https://codereview.chromium.org/1376913003", }, { name: "77073", refsource: "BID", tags: [], url: "http://www.securityfocus.com/bid/77073", }, { name: "GLSA-201603-09", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201603-09", }, { name: "RHSA-2015:1912", refsource: "REDHAT", tags: [], url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { name: "1033816", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id/1033816", }, { name: "USN-2770-2", refsource: "UBUNTU", tags: [], url: "http://www.ubuntu.com/usn/USN-2770-2", }, { name: "USN-2770-1", refsource: "UBUNTU", tags: [], url: "http://www.ubuntu.com/usn/USN-2770-1", }, { name: "DSA-3376", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2015/dsa-3376", }, { name: "[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update", refsource: "MLIST", tags: [], url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, }, lastModifiedDate: "2018-12-21T11:29Z", publishedDate: "2015-10-15T10:59Z", }, }, }
ghsa-w82p-vxv4-pvcf
Vulnerability from github
Published
2022-05-14 01:46
Modified
2022-05-14 01:46
Details
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
{ affected: [], aliases: [ "CVE-2015-6761", ], database_specific: { cwe_ids: [ "CWE-362", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2015-10-15T10:59:00Z", severity: "MODERATE", }, details: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", id: "GHSA-w82p-vxv4-pvcf", modified: "2022-05-14T01:46:22Z", published: "2022-05-14T01:46:22Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", }, { type: "WEB", url: "https://code.google.com/p/chromium/issues/detail?id=447860", }, { type: "WEB", url: "https://code.google.com/p/chromium/issues/detail?id=532967", }, { type: "WEB", url: "https://codereview.chromium.org/1376913003", }, { type: "WEB", url: "https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201603-09", }, { type: "WEB", url: "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dabea74d0e82ea80cd344f630497cafcb3ef872c", }, { type: "WEB", url: "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html", }, { type: "WEB", url: "http://rhn.redhat.com/errata/RHSA-2015-1912.html", }, { type: "WEB", url: "http://www.debian.org/security/2015/dsa-3376", }, { type: "WEB", url: "http://www.securityfocus.com/bid/77073", }, { type: "WEB", url: "http://www.securitytracker.com/id/1033816", }, { type: "WEB", url: "http://www.ubuntu.com/usn/USN-2770-1", }, { type: "WEB", url: "http://www.ubuntu.com/usn/USN-2770-2", }, ], schema_version: "1.4.0", severity: [], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.