RHSA-2018:2666HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
September 10, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (23)

CVE-2018-16080 →CVE-2018-16081 →CVE-2018-16082 →CVE-2018-16065 →CVE-2018-16068 →CVE-2018-16069 →CVE-2018-16073 →CVE-2018-16086 →CVE-2018-16088 →CVE-2018-16067 →CVE-2018-16078 →CVE-2018-16087 →CVE-2018-16066 →CVE-2018-16070 →CVE-2018-16075 →CVE-2018-16077 →CVE-2018-16083 →CVE-2018-16084 →CVE-2018-16085 →CVE-2018-16071 →CVE-2018-16074 →CVE-2018-16076 →CVE-2018-16079 →

📋 Description

CVE-2018-16065 — chromium-browser: Out of bounds write in V8 CVE-2018-16066 — chromium-browser: Out of bounds read in Blink CVE-2018-16067 — chromium-browser: Out of bounds read in WebAudio CVE-2018-16068 — chromium-browser: Out of bounds write in Mojo CVE-2018-16069 — chromium-browser: Out of bounds read in SwiftShader CVE-2018-16070 — chromium-browser: Integer overflow in Skia CVE-2018-16071 — chromium-browser: Use after free in WebRTC CVE-2018-16073 — chromium-browser: Site Isolation bypass after tab restore CVE-2018-16074 — chromium-browser: Site Isolation bypass using Blob URLS CVE-2018-16075 — chromium-browser: Local file access in Blink CVE-2018-16076 — chromium-browser: Out of bounds read in PDFium CVE-2018-16077 — chromium-browser: Content security policy bypass in Blink CVE-2018-16078 — chromium-browser: Credit card information leak in Autofill CVE-2018-16079 — chromium-browser: URL spoof in permission dialogs CVE-2018-16080 — chromium-browser: URL spoof in full screen mode CVE-2018-16081 — chromium-browser: Local file access in DevTools CVE-2018-16082 — chromium-browser: Stack buffer overflow in SwiftShader CVE-2018-16083 — chromium-browser: Out of bounds read in WebRTC CVE-2018-16084 — chromium-browser: User confirmation bypass in external protocol handling CVE-2018-16085 — chromium-browser: Use after free in Memory Instrumentation CVE-2018-16086 — chromium-browser: Script injection in New Tab Page CVE-2018-16087 — chromium-browser: Multiple download restriction bypass CVE-2018-16088 — chromium-browser: User gesture requirement bypass

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:69.0.3497.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (26)