Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 448
Alerts This Week
Warning Icon 1 448

Fedora 24: 2016-e0e1cb2b2b Critical: Chromium Memory Access

fedora
Calendar Grey December 16, 2016
Dist Fedora Esm H88
Essential patch release for Fedora's Chromium browser, resolving various vulnerabilities including buffer overflow.
Update to Chromium 55

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to Chromium 55. Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214, CVE-2016-5216, CVE-2016-5215, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5221, CVE-2016-5220, CVE-2016-5222, CVE-2016-9650, CVE-2016-5223, CVE-2016-5226, CVE-2016-5225, CVE-2016-5224, CVE-2016-9652

Topics%20covered

Topics Covered

security advisory Fedora critical update memory access web browser

Change Log

References


[ 1 ] Bug #1393734 - CVE-2016-5202 chromium-browser: various fixes from internal audits https://bugzilla.redhat.com/show_bug.cgi?id=1393734 [ 2 ] Bug #1393733 - CVE-2016-5201 chromium-browser: info leak in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1393733 [ 3 ] Bug #1393732 - CVE-2016-5200 chromium-browser: out of bounds memory access in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1393732 [ 4 ] Bug #1393731 - CVE-2016-5199 chromium-browser: heap corruption in ffmpeg https://bugzilla.redhat.com/show_bug.cgi?id=1393731 [ 5 ] Bug #1400879 - CVE-2016-9652 chromium-browser: various fixes from internal audits https://bugzilla.redhat.com/show_bug.cgi?id=1400879 [ 6 ] Bug #1400878 - CVE-2016-5224 chromium-browser: same-origin bypass in svg https://bugzilla.redhat.com/show_bug.cgi?id=1400878 [ 7 ] Bug #1400877 - CVE-2016-5225 chromium-browser: csp bypass in blink https://bugzilla.redhat.com/show_bug.cgi?id=...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade chromium' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 24
Version: 55.0.2883.87
Release: 1.fc24
URL: https://www.chromium.org/Home/
Summary: A WebKit (Blink) powered web browser

Topics%20covered

Topics Covered

security advisory Fedora critical update memory access web browser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.