cvelistv5 - CVE-2016-9652

CVE-2016-9652

Vulnerability from cvelistv5

Published

2019-11-20 14:56

Modified

2024-08-06 02:59

Severity ?

Summary

Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.

References

▼	URL	Tags
	chrome-cve-admin@google.com	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html
	chrome-cve-admin@google.com	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html
	chrome-cve-admin@google.com	http://rhn.redhat.com/errata/RHSA-2016-2919.html
	chrome-cve-admin@google.com	http://www.debian.org/security/2016/dsa-3731
	chrome-cve-admin@google.com	http://www.securityfocus.com/bid/94633
	chrome-cve-admin@google.com	http://www.ubuntu.com/usn/USN-3153-1
	chrome-cve-admin@google.com	https://bugs.chromium.org/p/chromium/issues/detail?id=669928
	chrome-cve-admin@google.com	https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html
	chrome-cve-admin@google.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/
	chrome-cve-admin@google.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/
	chrome-cve-admin@google.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/
	chrome-cve-admin@google.com	https://security.gentoo.org/glsa/201612-11
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html
	af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2016-2919.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3731
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/94633
	af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-3153-1
	af854a3a-2127-422b-91ae-364da2661108	https://bugs.chromium.org/p/chromium/issues/detail?id=669928
	af854a3a-2127-422b-91ae-364da2661108	https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html
	af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/
	af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/
	af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/
	af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201612-11

Impacted products

Vendor

Product

Version

▼

Google

Chrome

Version: 55.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3731"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94633"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3153-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "55.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "mixed",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-07T20:20:04",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3731"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securityfocus.com/bid/94633"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security.gentoo.org/glsa/201612-11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3153-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-9652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Chrome",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "55.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "mixed"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html",
              "refsource": "CONFIRM",
              "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
            },
            {
              "name": "http://www.debian.org/security/2016/dsa-3731",
              "refsource": "MISC",
              "url": "http://www.debian.org/security/2016/dsa-3731"
            },
            {
              "name": "http://www.securityfocus.com/bid/94633",
              "refsource": "MISC",
              "url": "http://www.securityfocus.com/bid/94633"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2016-2919.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/",
              "refsource": "MISC",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/"
            },
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html",
              "refsource": "MISC",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/",
              "refsource": "MISC",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/"
            },
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html",
              "refsource": "MISC",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
            },
            {
              "name": "https://security.gentoo.org/glsa/201612-11",
              "refsource": "MISC",
              "url": "https://security.gentoo.org/glsa/201612-11"
            },
            {
              "name": "http://www.ubuntu.com/usn/USN-3153-1",
              "refsource": "MISC",
              "url": "http://www.ubuntu.com/usn/USN-3153-1"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/",
              "refsource": "MISC",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/"
            },
            {
              "name": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928",
              "refsource": "CONFIRM",
              "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2016-9652",
    "datePublished": "2019-11-20T14:56:30",
    "dateReserved": "2016-11-29T00:00:00",
    "dateUpdated": "2024-08-06T02:59:03.328Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2016-9652\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2019-11-20T15:15:11.523\",\"lastModified\":\"2024-11-21T03:01:34.633\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.\"},{\"lang\":\"es\",\"value\":\"m\u00faltiples  vulnerabilidades no especificadas en Google Chrome anterior a la versi\u00f3n 55,0,2883,75\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"55.0.2883.75\",\"matchCriteriaId\":\"76DFFA6C-0AB2-4975-99BB-D8B0CAE4B9DE\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2919.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3731\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securityfocus.com/bid/94633\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3153-1\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://bugs.chromium.org/p/chromium/issues/detail?id=669928\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/201612-11\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2919.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3731\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/94633\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3153-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.chromium.org/p/chromium/issues/detail?id=669928\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201612-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

gsd-2016-9652

Vulnerability from gsd

Modified

2023-12-13 01:21

Details

Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.

Aliases

CVE-2016-9652

Aliases

CVE-2016-9652

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-9652",
    "description": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.",
    "id": "GSD-2016-9652",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-9652.html",
      "https://www.debian.org/security/2016/dsa-3731",
      "https://access.redhat.com/errata/RHSA-2016:2919",
      "https://ubuntu.com/security/CVE-2016-9652",
      "https://advisories.mageia.org/CVE-2016-9652.html",
      "https://security.archlinux.org/CVE-2016-9652"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-9652"
      ],
      "details": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.",
      "id": "GSD-2016-9652",
      "modified": "2023-12-13T01:21:21.983562Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@google.com",
        "ID": "CVE-2016-9652",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Chrome",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "55.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Google"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "mixed"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html",
            "refsource": "CONFIRM",
            "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
          },
          {
            "name": "http://www.debian.org/security/2016/dsa-3731",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2016/dsa-3731"
          },
          {
            "name": "http://www.securityfocus.com/bid/94633",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/94633"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2016-2919.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
          },
          {
            "name": "https://security.gentoo.org/glsa/201612-11",
            "refsource": "MISC",
            "url": "https://security.gentoo.org/glsa/201612-11"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-3153-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-3153-1"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/"
          },
          {
            "name": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928",
            "refsource": "CONFIRM",
            "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "55.0.2883.75",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-9652"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/",
              "refsource": "MISC",
              "tags": [],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/"
            },
            {
              "name": "http://www.debian.org/security/2016/dsa-3731",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.debian.org/security/2016/dsa-3731"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2016-2919.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
            },
            {
              "name": "http://www.ubuntu.com/usn/USN-3153-1",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-3153-1"
            },
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
            },
            {
              "name": "http://www.securityfocus.com/bid/94633",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/94633"
            },
            {
              "name": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/",
              "refsource": "MISC",
              "tags": [],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/"
            },
            {
              "name": "https://security.gentoo.org/glsa/201612-11",
              "refsource": "MISC",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201612-11"
            },
            {
              "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/",
              "refsource": "MISC",
              "tags": [],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/"
            },
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2020-02-07T21:15Z",
      "publishedDate": "2019-11-20T15:15Z"
    }
  }
}

ghsa-ch5q-r8mv-4p34

Vulnerability from github

Published

2022-05-24 17:01

Modified

2022-05-24 17:01

Details

Unspecified vulnerabilities in Google Chrome before 55.0.2883.75.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-9652"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-11-20T15:15:00Z",
    "severity": "HIGH"
  },
  "details": "Unspecified vulnerabilities in Google Chrome before 55.0.2883.75.",
  "id": "GHSA-ch5q-r8mv-4p34",
  "modified": "2022-05-24T17:01:36Z",
  "published": "2022-05-24T17:01:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9652"
    },
    {
      "type": "WEB",
      "url": "https://bugs.chromium.org/p/chromium/issues/detail?id=669928"
    },
    {
      "type": "WEB",
      "url": "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201612-11"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2919.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3731"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/94633"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-3153-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

rhsa-2016_2919

Vulnerability from csaf_redhat

Published

2016-12-07 19:08

Modified

2024-11-14 21:41

Summary

Red Hat Security Advisory: chromium-browser security update

Notes

Topic

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 55.0.2883.75. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 55.0.2883.75.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2016:2919",
        "url": "https://access.redhat.com/errata/RHSA-2016:2919"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
        "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
      },
      {
        "category": "external",
        "summary": "1400850",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400850"
      },
      {
        "category": "external",
        "summary": "1400851",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400851"
      },
      {
        "category": "external",
        "summary": "1400852",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400852"
      },
      {
        "category": "external",
        "summary": "1400853",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400853"
      },
      {
        "category": "external",
        "summary": "1400854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400854"
      },
      {
        "category": "external",
        "summary": "1400855",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400855"
      },
      {
        "category": "external",
        "summary": "1400856",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400856"
      },
      {
        "category": "external",
        "summary": "1400857",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400857"
      },
      {
        "category": "external",
        "summary": "1400859",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400859"
      },
      {
        "category": "external",
        "summary": "1400861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400861"
      },
      {
        "category": "external",
        "summary": "1400862",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400862"
      },
      {
        "category": "external",
        "summary": "1400863",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400863"
      },
      {
        "category": "external",
        "summary": "1400864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400864"
      },
      {
        "category": "external",
        "summary": "1400865",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400865"
      },
      {
        "category": "external",
        "summary": "1400866",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400866"
      },
      {
        "category": "external",
        "summary": "1400867",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400867"
      },
      {
        "category": "external",
        "summary": "1400868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400868"
      },
      {
        "category": "external",
        "summary": "1400869",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400869"
      },
      {
        "category": "external",
        "summary": "1400870",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400870"
      },
      {
        "category": "external",
        "summary": "1400871",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400871"
      },
      {
        "category": "external",
        "summary": "1400872",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400872"
      },
      {
        "category": "external",
        "summary": "1400873",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400873"
      },
      {
        "category": "external",
        "summary": "1400875",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400875"
      },
      {
        "category": "external",
        "summary": "1400876",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400876"
      },
      {
        "category": "external",
        "summary": "1400877",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400877"
      },
      {
        "category": "external",
        "summary": "1400878",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400878"
      },
      {
        "category": "external",
        "summary": "1400879",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400879"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2919.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-14T21:41:12+00:00",
      "generator": {
        "date": "2024-11-14T21:41:12+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2016:2919",
      "initial_release_date": "2016-12-07T19:08:13+00:00",
      "revision_history": [
        {
          "date": "2016-12-07T19:08:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2016-12-07T19:08:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T21:41:12+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
                  "product_id": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
                  "product_id": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:55.0.2883.75-1.el6.i686",
                "product": {
                  "name": "chromium-browser-0:55.0.2883.75-1.el6.i686",
                  "product_id": "chromium-browser-0:55.0.2883.75-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-5203",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400857"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5203"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400857",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400857"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5203",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5203"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5203",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5203"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in pdfium"
    },
    {
      "cve": "CVE-2016-5204",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400855"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: universal xss in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5204"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400855",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400855"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5204"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: universal xss in blink"
    },
    {
      "cve": "CVE-2016-5205",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: universal xss in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5205"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5205",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5205"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5205",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5205"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: universal xss in blink"
    },
    {
      "cve": "CVE-2016-5206",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400853"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: same-origin bypass in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5206"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400853",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400853"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5206",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5206"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5206",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5206"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: same-origin bypass in pdfium"
    },
    {
      "cve": "CVE-2016-5207",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400852"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: universal xss in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5207"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400852",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400852"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5207",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5207"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5207",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5207"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: universal xss in blink"
    },
    {
      "cve": "CVE-2016-5208",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400851"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: universal xss in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5208"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400851",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400851"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5208",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5208"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5208",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5208"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: universal xss in blink"
    },
    {
      "cve": "CVE-2016-5209",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out of bounds write in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5209"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5209"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out of bounds write in blink"
    },
    {
      "cve": "CVE-2016-5210",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400859"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out of bounds write in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5210"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400859",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400859"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5210",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5210"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5210",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5210"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out of bounds write in pdfium"
    },
    {
      "cve": "CVE-2016-5211",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400862"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5211"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400862",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400862"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5211",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5211"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5211",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5211"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in pdfium"
    },
    {
      "cve": "CVE-2016-5212",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: local file disclosure in devtools",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5212"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5212",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5212"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5212",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5212"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: local file disclosure in devtools"
    },
    {
      "cve": "CVE-2016-5213",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400863"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in v8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5213"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400863",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400863"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5213",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5213"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5213",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5213"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in v8"
    },
    {
      "cve": "CVE-2016-5214",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: file download protection bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5214"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5214",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5214"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5214",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5214"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: file download protection bypass"
    },
    {
      "cve": "CVE-2016-5215",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in webaudio",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5215"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5215",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5215"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5215",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5215"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use after free in webaudio"
    },
    {
      "cve": "CVE-2016-5216",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400865"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5216"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400865",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400865"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5216",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5216"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5216",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5216"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use after free in pdfium"
    },
    {
      "cve": "CVE-2016-5217",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use of unvalidated data in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5217"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use of unvalidated data in pdfium"
    },
    {
      "cve": "CVE-2016-5218",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: address spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5218"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5218"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: address spoofing in omnibox"
    },
    {
      "cve": "CVE-2016-5219",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400869"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in v8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5219"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400869",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400869"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5219",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5219"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5219",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5219"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use after free in v8"
    },
    {
      "cve": "CVE-2016-5220",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400871"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: local file access in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5220"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400871",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400871"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5220",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5220"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5220",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5220"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: local file access in pdfium"
    },
    {
      "cve": "CVE-2016-5221",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400870"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: integer overflow in angle",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5221"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400870",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400870"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5221"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5221",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5221"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: integer overflow in angle"
    },
    {
      "cve": "CVE-2016-5222",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400872"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: address spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5222"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400872",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400872"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5222"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: address spoofing in omnibox"
    },
    {
      "cve": "CVE-2016-5223",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400875"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: integer overflow in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5223"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400875",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400875"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5223",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5223"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5223",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5223"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: integer overflow in pdfium"
    },
    {
      "cve": "CVE-2016-5224",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400878"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: same-origin bypass in svg",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5224"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400878",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400878"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5224",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5224"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5224",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5224"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: same-origin bypass in svg"
    },
    {
      "cve": "CVE-2016-5225",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400877"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: csp bypass in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5225"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400877",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400877"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5225",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5225"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5225",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5225"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: csp bypass in blink"
    },
    {
      "cve": "CVE-2016-5226",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400876"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: limited xss in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5226"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400876",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400876"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5226",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5226"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5226",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5226"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: limited xss in blink"
    },
    {
      "cve": "CVE-2016-9650",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400873"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: csp referrer disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-9650"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400873",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400873"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9650",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-9650"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9650",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9650"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: csp referrer disclosure"
    },
    {
      "cve": "CVE-2016-9651",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400850"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: private property access in v8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-9651"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400850",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400850"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-9651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9651"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: private property access in v8"
    },
    {
      "cve": "CVE-2016-9652",
      "discovery_date": "2016-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1400879"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: various fixes from internal audits",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-9652"
        },
        {
          "category": "external",
          "summary": "RHBZ#1400879",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400879"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9652",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-9652"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9652",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9652"
        },
        {
          "category": "external",
          "summary": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html",
          "url": "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2016-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-12-07T19:08:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:2919"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: various fixes from internal audits"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2016-9652

Vulnerability from cvelistv5

gsd-2016-9652

Vulnerability from gsd

ghsa-ch5q-r8mv-4p34

Vulnerability from github

rhsa-2016_2919

Vulnerability from csaf_redhat

Tags

Sightings

Nomenclature