rhsa-2015_1912
Vulnerability from csaf_redhat
Published
2015-10-15 21:09
Modified
2024-11-14 15:30
Summary
Red Hat Security Advisory: chromium-browser security update

Notes

Topic
Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink). Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758, CVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763) All Chromium users should upgrade to these updated packages, which contain Chromium version 46.0.2490.71, which corrects these issues. After installing the update, Chromium must be restarted for the changes to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated chromium-browser packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Chromium to crash, execute\narbitrary code, or disclose sensitive information when visited by the\nvictim. (CVE-2015-6755, CVE-2015-6756, CVE-2015-6757, CVE-2015-6758,\nCVE-2015-6759, CVE-2015-6760, CVE-2015-6761, CVE-2015-6762, CVE-2015-6763)\n\nAll Chromium users should upgrade to these updated packages, which contain\nChromium version 46.0.2490.71, which corrects these issues. After\ninstalling the update, Chromium must be restarted for the changes to take \neffect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1912",
        "url": "https://access.redhat.com/errata/RHSA-2015:1912"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
        "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
      },
      {
        "category": "external",
        "summary": "1271480",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271480"
      },
      {
        "category": "external",
        "summary": "1271483",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271483"
      },
      {
        "category": "external",
        "summary": "1271553",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271553"
      },
      {
        "category": "external",
        "summary": "1271554",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271554"
      },
      {
        "category": "external",
        "summary": "1271555",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271555"
      },
      {
        "category": "external",
        "summary": "1271556",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271556"
      },
      {
        "category": "external",
        "summary": "1271557",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271557"
      },
      {
        "category": "external",
        "summary": "1271558",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271558"
      },
      {
        "category": "external",
        "summary": "1271559",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271559"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1912.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-14T15:30:47+00:00",
      "generator": {
        "date": "2024-11-14T15:30:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2015:1912",
      "initial_release_date": "2015-10-15T21:09:38+00:00",
      "revision_history": [
        {
          "date": "2015-10-15T21:09:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-10-15T21:09:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T15:30:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:46.0.2490.71-1.el6.i686",
                "product": {
                  "name": "chromium-browser-0:46.0.2490.71-1.el6.i686",
                  "product_id": "chromium-browser-0:46.0.2490.71-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
                  "product_id": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@46.0.2490.71-1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
                  "product_id": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@46.0.2490.71-1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-6755",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2015-10-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271480"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: cross-origin bypass in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6755"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271480",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271480"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6755",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6755"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6755",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6755"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: cross-origin bypass in Blink"
    },
    {
      "cve": "CVE-2015-6756",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2015-10-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271483"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use-after-free in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6756"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271483",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271483"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6756",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6756"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6756",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6756"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use-after-free in PDFium"
    },
    {
      "cve": "CVE-2015-6757",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271553"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use-after-free in ServiceWorker",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6757"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271553",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271553"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6757"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use-after-free in ServiceWorker"
    },
    {
      "cve": "CVE-2015-6758",
      "cwe": {
        "id": "CWE-704",
        "name": "Incorrect Type Conversion or Cast"
      },
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271554"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Bad-cast in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6758"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271554"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6758",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6758"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6758",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6758"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Bad-cast in PDFium"
    },
    {
      "cve": "CVE-2015-6759",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271555"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Information leakage in LocalStorage",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6759"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271555",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271555"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6759",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6759"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6759",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6759"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Information leakage in LocalStorage"
    },
    {
      "cve": "CVE-2015-6760",
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271556"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Improper error handling in libANGLE",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6760"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271556",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271556"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6760",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6760"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6760",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6760"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Improper error handling in libANGLE"
    },
    {
      "cve": "CVE-2015-6761",
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271557"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Memory corruption in FFMpeg",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6761"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271557",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271557"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6761",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6761"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6761",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6761"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Memory corruption in FFMpeg"
    },
    {
      "cve": "CVE-2015-6762",
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271558"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font\u0027s URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CORS bypass in CSS fonts",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6762"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271558",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271558"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6762",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6762"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6762",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6762"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: CORS bypass in CSS fonts"
    },
    {
      "cve": "CVE-2015-6763",
      "discovery_date": "2015-10-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1271559"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: various fixes from internal audits",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
          "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-6763"
        },
        {
          "category": "external",
          "summary": "RHBZ#1271559",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271559"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-6763",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-6763"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6763",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6763"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html"
        }
      ],
      "release_date": "2015-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-15T21:09:38+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1912"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Client-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Server-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-0:46.0.2490.71-1.el6.x86_64",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.i686",
            "6Workstation-Supplementary-6.7.z:chromium-browser-debuginfo-0:46.0.2490.71-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: various fixes from internal audits"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.