RHSA-2018:0265HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
February 1, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (25)

CVE-2018-6032 →CVE-2018-6033 →CVE-2018-6034 →CVE-2018-6040 →CVE-2018-6043 →CVE-2018-6048 →CVE-2018-6050 →CVE-2018-6051 →CVE-2018-6031 →CVE-2018-6035 →CVE-2018-6039 →CVE-2018-6041 →CVE-2018-6042 →CVE-2018-6047 →CVE-2018-6053 →CVE-2018-6055 →CVE-2018-6036 →CVE-2018-6038 →CVE-2018-6046 →CVE-2018-6049 →CVE-2018-6052 →CVE-2018-6054 →CVE-2018-6119 →CVE-2018-6037 →CVE-2018-6045 →

📋 Description

CVE-2018-6031 — chromium-browser: use after free in pdfium CVE-2018-6032 — chromium-browser: same origin bypass in shared worker CVE-2018-6033 — chromium-browser: race when opening downloaded files CVE-2018-6034 — chromium-browser: integer overflow in blink CVE-2018-6035 — chromium-browser: insufficient isolation of devtools from extensions CVE-2018-6036 — chromium-browser: integer underflow in webassembly CVE-2018-6037 — chromium-browser: insufficient user gesture requirements in autofill CVE-2018-6038 — chromium-browser: heap buffer overflow in webgl CVE-2018-6039 — chromium-browser: xss in devtools CVE-2018-6040 — chromium-browser: content security policy bypass CVE-2018-6041 — chromium-browser: url spoof in navigation CVE-2018-6042 — chromium-browser: url spoof in omnibox CVE-2018-6043 — chromium-browser: insufficient escaping with external url handlers CVE-2018-6045 — chromium-browser: insufficient isolation of devtools from extensions CVE-2018-6046 — chromium-browser: insufficient isolation of devtools from extensions CVE-2018-6047 — chromium-browser: cross origin url leak in webgl CVE-2018-6048 — chromium-browser: referrer policy bypass in blink CVE-2018-6049 — chromium-browser: ui spoof in permissions CVE-2018-6050 — chromium-browser: url spoof in omnibox CVE-2018-6051 — chromium-browser: referrer leak in xss auditor CVE-2018-6052 — chromium-browser: incomplete no-referrer policy implementation CVE-2018-6053 — chromium-browser: leak of page thumbnails in new tab page CVE-2018-6054 — chromium-browser: use after free in webui CVE-2018-6055 — chromium-browser: Insufficient policy enforcement in Catalog Service CVE-2018-6119 — chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:64.0.3282.119-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (27)