RHSA-2018:2282HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
July 30, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (31)

CVE-2018-6166 →CVE-2018-6171 →CVE-2018-6177 →CVE-2018-6162 →CVE-2018-6165 →CVE-2018-6172 →CVE-2018-6176 →CVE-2018-6163 →CVE-2018-6150 →CVE-2018-6156 →CVE-2018-6174 →CVE-2018-6175 →CVE-2018-6157 →CVE-2018-6178 →CVE-2018-4117 →CVE-2018-6155 →CVE-2018-6169 →CVE-2018-6170 →CVE-2018-6159 →CVE-2018-6167 →CVE-2018-6173 →CVE-2018-6152 →CVE-2018-6153 →CVE-2018-6168 →CVE-2018-16064 →CVE-2018-6151 →CVE-2018-6158 →CVE-2018-6164 →CVE-2018-6179 →CVE-2018-6154 →CVE-2018-6161 →

📋 Description

CVE-2018-4117 — chromium-browser: Cross origin information leak in Blink CVE-2018-6150 — chromium-browser: Cross origin information disclosure in Service Workers CVE-2018-6151 — chromium-browser: Bad cast in DevTools CVE-2018-6152 — chromium-browser: Local file write in DevTools CVE-2018-6153 — chromium-browser: Stack buffer overflow in Skia CVE-2018-6154 — chromium-browser: Heap buffer overflow in WebGL CVE-2018-6155 — chromium-browser: Use after free in WebRTC CVE-2018-6156 — chromium-browser: Heap buffer overflow in WebRTC CVE-2018-6157 — chromium-browser: Type confusion in WebRTC CVE-2018-6158 — chromium-browser: Use after free in Blink CVE-2018-6159 — chromium-browser: Same origin policy bypass in ServiceWorker CVE-2018-6161 — chromium-browser: Same origin policy bypass in WebAudio CVE-2018-6162 — chromium-browser: Heap buffer overflow in WebGL CVE-2018-6163 — chromium-browser: URL spoof in Omnibox CVE-2018-6164 — chromium-browser: Same origin policy bypass in ServiceWorker CVE-2018-6165 — chromium-browser: URL spoof in Omnibox CVE-2018-6166 — chromium-browser: URL spoof in Omnibox CVE-2018-6167 — chromium-browser: URL spoof in Omnibox CVE-2018-6168 — chromium-browser: CORS bypass in Blink CVE-2018-6169 — chromium-browser: Permissions bypass in extension installation CVE-2018-6170 — chromium-browser: Type confusion in PDFium CVE-2018-6171 — chromium-browser: Use after free in WebBluetooth CVE-2018-6172 — chromium-browser: URL spoof in Omnibox CVE-2018-6173 — chromium-browser: URL spoof in Omnibox CVE-2018-6174 — chromium-browser: Integer overflow in SwiftShader CVE-2018-6175 — chromium-browser: URL spoof in Omnibox CVE-2018-6176 — chromium-browser: Local user privilege escalation in Extensions CVE-2018-6177 — chromium-browser: Cross origin information leak in Blink CVE-2018-6178 — chromium-browser: UI spoof in Extensions CVE-2018-6179 — chromium-browser: Local file information leak in Extensions CVE-2018-16064 — chromium-browser: Request privilege escalation in Extensions

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:68.0.3440.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (34)