RHSA-2017_3401

Vulnerability from csaf_redhat - Published: 2017-12-07 19:30 - Updated: 2024-11-14 21:47
Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Critical
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 63.0.3239.84. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-15407, CVE-2017-15408, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15412, CVE-2017-15413, CVE-2017-15415, CVE-2017-15416, CVE-2017-15417, CVE-2017-15418, CVE-2017-15419, CVE-2017-15420, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424, CVE-2017-15425, CVE-2017-15426, CVE-2017-15427)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.

9.6 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: 6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 —
Vendor Fix fix
Threats
Impact Critical
CVE-2017-15408

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15409

Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15410

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15412

A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15413

Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Important
CVE-2017-15415

Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15416

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15418

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15419

Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Moderate
CVE-2017-15423

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Low
CVE-2017-15424

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Low
CVE-2017-15425

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Low
CVE-2017-15426

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Low
CVE-2017-15427

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 12 products, the same list as for CVE-2017-15407
Threats
Impact Low
References
URL Category
https://access.redhat.com/errata/RHSA-2017:3401 self
https://access.redhat.com/security/updates/classi… external
https://chromereleases.googleblog.com/2017/12/sta… external
https://bugzilla.redhat.com/show_bug.cgi?id=1523123 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523124 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523125 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523126 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523127 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523128 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523129 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523130 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523131 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523132 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523133 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523134 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523135 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523136 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523137 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523138 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523139 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523140 external
https://bugzilla.redhat.com/show_bug.cgi?id=1523141 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2017-15407 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523123 external
https://www.cve.org/CVERecord?id=CVE-2017-15407 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15407 external
https://chromereleases.googleblog.com/2017/12/sta… external
https://access.redhat.com/security/cve/CVE-2017-15408 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523124 external
https://www.cve.org/CVERecord?id=CVE-2017-15408 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15408 external
https://access.redhat.com/security/cve/CVE-2017-15409 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523125 external
https://www.cve.org/CVERecord?id=CVE-2017-15409 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15409 external
https://access.redhat.com/security/cve/CVE-2017-15410 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523126 external
https://www.cve.org/CVERecord?id=CVE-2017-15410 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15410 external
https://access.redhat.com/security/cve/CVE-2017-15411 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523127 external
https://www.cve.org/CVERecord?id=CVE-2017-15411 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15411 external
https://access.redhat.com/security/cve/CVE-2017-15412 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523128 external
https://www.cve.org/CVERecord?id=CVE-2017-15412 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15412 external
https://access.redhat.com/security/cve/CVE-2017-15413 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523129 external
https://www.cve.org/CVERecord?id=CVE-2017-15413 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15413 external
https://access.redhat.com/security/cve/CVE-2017-15415 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523130 external
https://www.cve.org/CVERecord?id=CVE-2017-15415 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15415 external
https://access.redhat.com/security/cve/CVE-2017-15416 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523131 external
https://www.cve.org/CVERecord?id=CVE-2017-15416 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15416 external
https://access.redhat.com/security/cve/CVE-2017-15417 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523132 external
https://www.cve.org/CVERecord?id=CVE-2017-15417 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15417 external
https://access.redhat.com/security/cve/CVE-2017-15418 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523133 external
https://www.cve.org/CVERecord?id=CVE-2017-15418 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15418 external
https://access.redhat.com/security/cve/CVE-2017-15419 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523134 external
https://www.cve.org/CVERecord?id=CVE-2017-15419 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15419 external
https://access.redhat.com/security/cve/CVE-2017-15420 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523135 external
https://www.cve.org/CVERecord?id=CVE-2017-15420 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15420 external
https://access.redhat.com/security/cve/CVE-2017-15422 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523136 external
https://www.cve.org/CVERecord?id=CVE-2017-15422 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15422 external
https://access.redhat.com/security/cve/CVE-2017-15423 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523137 external
https://www.cve.org/CVERecord?id=CVE-2017-15423 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15423 external
https://access.redhat.com/security/cve/CVE-2017-15424 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523138 external
https://www.cve.org/CVERecord?id=CVE-2017-15424 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15424 external
https://access.redhat.com/security/cve/CVE-2017-15425 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523139 external
https://www.cve.org/CVERecord?id=CVE-2017-15425 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15425 external
https://access.redhat.com/security/cve/CVE-2017-15426 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523140 external
https://www.cve.org/CVERecord?id=CVE-2017-15426 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15426 external
https://access.redhat.com/security/cve/CVE-2017-15427 self
https://bugzilla.redhat.com/show_bug.cgi?id=1523141 external
https://www.cve.org/CVERecord?id=CVE-2017-15427 external
https://nvd.nist.gov/vuln/detail/CVE-2017-15427 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 63.0.3239.84.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-15407, CVE-2017-15408, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15412, CVE-2017-15413, CVE-2017-15415, CVE-2017-15416, CVE-2017-15417, CVE-2017-15418, CVE-2017-15419, CVE-2017-15420, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424, CVE-2017-15425, CVE-2017-15426, CVE-2017-15427)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:3401",
        "url": "https://access.redhat.com/errata/RHSA-2017:3401"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
      },
      {
        "category": "external",
        "summary": "1523123",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523123"
      },
      {
        "category": "external",
        "summary": "1523124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523124"
      },
      {
        "category": "external",
        "summary": "1523125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523125"
      },
      {
        "category": "external",
        "summary": "1523126",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523126"
      },
      {
        "category": "external",
        "summary": "1523127",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523127"
      },
      {
        "category": "external",
        "summary": "1523128",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523128"
      },
      {
        "category": "external",
        "summary": "1523129",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523129"
      },
      {
        "category": "external",
        "summary": "1523130",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523130"
      },
      {
        "category": "external",
        "summary": "1523131",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523131"
      },
      {
        "category": "external",
        "summary": "1523132",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523132"
      },
      {
        "category": "external",
        "summary": "1523133",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523133"
      },
      {
        "category": "external",
        "summary": "1523134",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523134"
      },
      {
        "category": "external",
        "summary": "1523135",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523135"
      },
      {
        "category": "external",
        "summary": "1523136",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523136"
      },
      {
        "category": "external",
        "summary": "1523137",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523137"
      },
      {
        "category": "external",
        "summary": "1523138",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523138"
      },
      {
        "category": "external",
        "summary": "1523139",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523139"
      },
      {
        "category": "external",
        "summary": "1523140",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523140"
      },
      {
        "category": "external",
        "summary": "1523141",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523141"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3401.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-14T21:47:17+00:00",
      "generator": {
        "date": "2024-11-14T21:47:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:3401",
      "initial_release_date": "2017-12-07T19:30:35+00:00",
      "revision_history": [
        {
          "date": "2017-12-07T19:30:35+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-12-07T19:30:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T21:47:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@63.0.3239.84-1.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
                "product": {
                  "name": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
                  "product_id": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@63.0.3239.84-1.el6_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
                  "product_id": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@63.0.3239.84-1.el6_9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
                "product": {
                  "name": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
                  "product_id": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@63.0.3239.84-1.el6_9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-15407",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523123"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out of bounds write in quic",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523123",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523123"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15407"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "chromium-browser: out of bounds write in quic"
    },
    {
      "cve": "CVE-2017-15408",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: heap buffer overflow in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15408"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15408",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15408"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15408",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15408"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: heap buffer overflow in pdfium"
    },
    {
      "cve": "CVE-2017-15409",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out of bounds write in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15409"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15409",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15409"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15409",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15409"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out of bounds write in skia"
    },
    {
      "cve": "CVE-2017-15410",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523126"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15410"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523126",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523126"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15410"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in pdfium"
    },
    {
      "cve": "CVE-2017-15411",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523127"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15411"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523127",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523127"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15411",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15411"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15411",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15411"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in pdfium"
    },
    {
      "cve": "CVE-2017-15412",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523128"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15412"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523128",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523128"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15412"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c"
    },
    {
      "cve": "CVE-2017-15413",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523129"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: type confusion in webassembly",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15413"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523129",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523129"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15413",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15413"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15413",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15413"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: type confusion in webassembly"
    },
    {
      "cve": "CVE-2017-15415",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: pointer information disclosure in ipc call",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15415"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15415",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15415"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15415",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15415"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: pointer information disclosure in ipc call"
    },
    {
      "cve": "CVE-2017-15416",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out of bounds read in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15416"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15416",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15416"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15416",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15416"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: out of bounds read in blink"
    },
    {
      "cve": "CVE-2017-15417",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523132"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: cross origin information disclosure in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15417"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523132",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523132"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15417",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15417"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15417",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15417"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: cross origin information disclosure in skia"
    },
    {
      "cve": "CVE-2017-15418",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use of uninitialized value in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15418"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15418",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15418"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15418",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15418"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use of uninitialized value in skia"
    },
    {
      "cve": "CVE-2017-15419",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523134"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: cross origin leak of redirect url in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15419"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523134",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523134"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15419"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: cross origin leak of redirect url in blink"
    },
    {
      "cve": "CVE-2017-15420",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523135"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15420"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523135",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523135"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15420"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: url spoofing in omnibox"
    },
    {
      "cve": "CVE-2017-15422",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523136"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: integer overflow in icu",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15422"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523136",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523136"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15422"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: integer overflow in icu"
    },
    {
      "cve": "CVE-2017-15423",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523137"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: issue with spake implementation in boringssl",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15423"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523137",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523137"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15423",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15423"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15423",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15423"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: issue with spake implementation in boringssl"
    },
    {
      "cve": "CVE-2017-15424",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523138"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoof in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15424"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523138",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523138"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15424",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15424"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15424",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15424"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: url spoof in omnibox"
    },
    {
      "cve": "CVE-2017-15425",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523139"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoof in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15425"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523139",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523139"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15425",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15425"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15425",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15425"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: url spoof in omnibox"
    },
    {
      "cve": "CVE-2017-15426",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523140"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoof in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15426"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523140",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523140"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15426",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15426"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15426",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15426"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: url spoof in omnibox"
    },
    {
      "cve": "CVE-2017-15427",
      "discovery_date": "2017-12-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523141"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: insufficient blocking of javascript in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15427"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523141",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523141"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15427",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15427"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15427",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15427"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-12-07T19:30:35+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:3401"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:63.0.3239.84-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:63.0.3239.84-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: insufficient blocking of javascript in omnibox"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.