rhsa-2017_1399
Vulnerability from csaf_redhat
Published
2017-06-06 19:33
Modified
2024-11-14 23:34
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 59.0.3071.86.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5070, CVE-2017-5071, CVE-2017-5072, CVE-2017-5073, CVE-2017-5074, CVE-2017-5075, CVE-2017-5076, CVE-2017-5077, CVE-2017-5078, CVE-2017-5079, CVE-2017-5080, CVE-2017-5081, CVE-2017-5086, CVE-2017-5082, CVE-2017-5083, CVE-2017-5085)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 59.0.3071.86.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5070, CVE-2017-5071, CVE-2017-5072, CVE-2017-5073, CVE-2017-5074, CVE-2017-5075, CVE-2017-5076, CVE-2017-5077, CVE-2017-5078, CVE-2017-5079, CVE-2017-5080, CVE-2017-5081, CVE-2017-5086, CVE-2017-5082, CVE-2017-5083, CVE-2017-5085)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1399",
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
},
{
"category": "external",
"summary": "1459021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459021"
},
{
"category": "external",
"summary": "1459022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459022"
},
{
"category": "external",
"summary": "1459023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459023"
},
{
"category": "external",
"summary": "1459024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459024"
},
{
"category": "external",
"summary": "1459025",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459025"
},
{
"category": "external",
"summary": "1459027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459027"
},
{
"category": "external",
"summary": "1459028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459028"
},
{
"category": "external",
"summary": "1459029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459029"
},
{
"category": "external",
"summary": "1459030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459030"
},
{
"category": "external",
"summary": "1459031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459031"
},
{
"category": "external",
"summary": "1459032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459032"
},
{
"category": "external",
"summary": "1459033",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459033"
},
{
"category": "external",
"summary": "1459034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459034"
},
{
"category": "external",
"summary": "1459035",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459035"
},
{
"category": "external",
"summary": "1459036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459036"
},
{
"category": "external",
"summary": "1459037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459037"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1399.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2024-11-14T23:34:20+00:00",
"generator": {
"date": "2024-11-14T23:34:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:1399",
"initial_release_date": "2017-06-06T19:33:51+00:00",
"revision_history": [
{
"date": "2017-06-06T19:33:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-06T19:33:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:34:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"product_id": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@59.0.3071.86-1.el6_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"product": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"product_id": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@59.0.3071.86-1.el6_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"product": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"product_id": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@59.0.3071.86-1.el6_9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"product": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"product_id": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@59.0.3071.86-1.el6_9?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-5070",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459021"
}
],
"notes": [
{
"category": "description",
"text": "Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: type confusion in v8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5070"
},
{
"category": "external",
"summary": "RHBZ#1459021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459021"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5070",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5070"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5070",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5070"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-06-08T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: type confusion in v8"
},
{
"cve": "CVE-2017-5071",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459022"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: out of bounds read in v8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5071"
},
{
"category": "external",
"summary": "RHBZ#1459022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5071",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5071"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5071",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5071"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: out of bounds read in v8"
},
{
"cve": "CVE-2017-5072",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459023"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: address spoofing in omnibox",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5072"
},
{
"category": "external",
"summary": "RHBZ#1459023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459023"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5072",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5072"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: address spoofing in omnibox"
},
{
"cve": "CVE-2017-5073",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459024"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: use after free in print preview",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5073"
},
{
"category": "external",
"summary": "RHBZ#1459024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5073",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5073"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: use after free in print preview"
},
{
"cve": "CVE-2017-5074",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459025"
}
],
"notes": [
{
"category": "description",
"text": "A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: use after free in apps bluetooth",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5074"
},
{
"category": "external",
"summary": "RHBZ#1459025",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459025"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5074",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5074"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: use after free in apps bluetooth"
},
{
"cve": "CVE-2017-5075",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459027"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: information leak in csp reporting",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5075"
},
{
"category": "external",
"summary": "RHBZ#1459027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459027"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5075",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5075"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: information leak in csp reporting"
},
{
"cve": "CVE-2017-5076",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459029"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: address spoofing in omnibox",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5076"
},
{
"category": "external",
"summary": "RHBZ#1459029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459029"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5076",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5076"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: address spoofing in omnibox"
},
{
"cve": "CVE-2017-5077",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459030"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: heap buffer overflow in skia",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5077"
},
{
"category": "external",
"summary": "RHBZ#1459030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5077",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5077"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: heap buffer overflow in skia"
},
{
"cve": "CVE-2017-5078",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459031"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient validation of untrusted input in Blink\u0027s mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: possible command injection in mailto handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5078"
},
{
"category": "external",
"summary": "RHBZ#1459031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459031"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5078",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5078"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: possible command injection in mailto handling"
},
{
"cve": "CVE-2017-5079",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459032"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: ui spoofing in blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5079"
},
{
"category": "external",
"summary": "RHBZ#1459032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459032"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5079",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5079"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: ui spoofing in blink"
},
{
"cve": "CVE-2017-5080",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459033"
}
],
"notes": [
{
"category": "description",
"text": "A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: use after free in credit card autofill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5080"
},
{
"category": "external",
"summary": "RHBZ#1459033",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459033"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5080",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5080"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: use after free in credit card autofill"
},
{
"cve": "CVE-2017-5081",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459034"
}
],
"notes": [
{
"category": "description",
"text": "Lack of verification of an extension\u0027s locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: extension verification bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5081"
},
{
"category": "external",
"summary": "RHBZ#1459034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459034"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5081",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5081"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5081",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5081"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: extension verification bypass"
},
{
"cve": "CVE-2017-5082",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459035"
}
],
"notes": [
{
"category": "description",
"text": "Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: insufficient hardening in credit card editor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5082"
},
{
"category": "external",
"summary": "RHBZ#1459035",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459035"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5082",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5082"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5082",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5082"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: insufficient hardening in credit card editor"
},
{
"cve": "CVE-2017-5083",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459036"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: ui spoofing in blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5083"
},
{
"category": "external",
"summary": "RHBZ#1459036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5083",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5083"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: ui spoofing in blink"
},
{
"cve": "CVE-2017-5085",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459037"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: inappropriate javascript execution on webui pages",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5085"
},
{
"category": "external",
"summary": "RHBZ#1459037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5085",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5085"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: inappropriate javascript execution on webui pages"
},
{
"cve": "CVE-2017-5086",
"discovery_date": "2017-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1459028"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: address spoofing in omnibox",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-5086"
},
{
"category": "external",
"summary": "RHBZ#1459028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459028"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-5086",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5086"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
"url": "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html"
}
],
"release_date": "2017-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-06T19:33:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1399"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-0:59.0.3071.86-1.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:59.0.3071.86-1.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: address spoofing in omnibox"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.