[SECURITY] Fedora 30 Update: chromium-73.0.3683.75-2.fc30

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 29 Update: chromium-70.0.3538.77-4.fc29

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 28 Update: chromium-69.0.3497.100-1.fc28

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 27 Update: chromium-69.0.3497.92-1.fc27

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 28 Update: chromium-69.0.3497.92-1.fc28

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 28 Update: chromium-65.0.3325.181-1.fc28

Chromium is an open-source web browser, powered by WebKit Blink...

RHEL 6 : chromium-browser (RHSA-2018:0265)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0265 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 64.0.3282.119. Security Fixes:...

[SECURITY] Fedora 26 Update: chromium-61.0.3163.100-1.fc26

Chromium is an open-source web browser, powered by WebKit Blink...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

[SECURITY] Fedora 26 Update: chromium-59.0.3071.104-1.fc26

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 25 Update: chromium-58.0.3029.110-2.fc25

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 23 Update: chromium-54.0.2840.90-3.fc23

Chromium is an open-source web browser, powered by WebKit Blink...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2016-5150

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database aka IndexedDB API implementation that does not properly restrict key-path evaluation, which allows remote...

UBUNTU-CVE-2016-5164

Cross-site scripting XSS vulnerability in WebKit/Source/platform/v8inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools aka...

CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs,...

CVE-2016-5135

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...

CVE-2016-1711

WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

UBUNTU-CVE-2016-1667

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a...