Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (42)
📋 Description
CVE-2019-18197 — libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure CVE-2019-19880 — sqlite: invalid pointer dereference in exprListAppendList in window.c CVE-2019-19923 — sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference CVE-2019-19925 — sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive CVE-2019-19926 — sqlite: error mishandling because of incomplete fix of CVE-2019-19880 CVE-2020-6381 — chromium-browser: Integer overflow in JavaScript CVE-2020-6382 — chromium-browser: Type Confusion in JavaScript CVE-2020-6385 — chromium-browser: Insufficient policy enforcement in storage CVE-2020-6387 — chromium-browser: Out of bounds write in WebRTC CVE-2020-6388 — chromium-browser: Out of bounds memory access in WebAudio CVE-2020-6389 — chromium-browser: Out of bounds write in WebRTC CVE-2020-6390 — chromium-browser: Out of bounds memory access in streams CVE-2020-6391 — chromium-browser: Insufficient validation of untrusted input in Blink CVE-2020-6392 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6393 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6394 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6395 — chromium-browser: Out of bounds read in JavaScript CVE-2020-6396 — chromium-browser: Inappropriate implementation in Skia CVE-2020-6397 — chromium-browser: Incorrect security UI in sharing CVE-2020-6398 — chromium-browser: Uninitialized use in PDFium CVE-2020-6399 — chromium-browser: Insufficient policy enforcement in AppCache CVE-2020-6400 — chromium-browser: Inappropriate implementation in CORS CVE-2020-6401 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6402 — chromium-browser: Insufficient policy enforcement in downloads CVE-2020-6403 — chromium-browser: Incorrect security UI in Omnibox CVE-2020-6404 — chromium-browser: Inappropriate implementation in Blink CVE-2020-6405 — sqlite: Out-of-bounds read in SELECT with ON/USING clause CVE-2020-6406 — chromium-browser: Use after free in audio CVE-2020-6408 — chromium-browser: Insufficient policy enforcement in CORS CVE-2020-6409 — chromium-browser: Inappropriate implementation in Omnibox CVE-2020-6410 — chromium-browser: Insufficient policy enforcement in navigation CVE-2020-6411 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6412 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6413 — chromium-browser: Inappropriate implementation in Blink CVE-2020-6414 — chromium-browser: Insufficient policy enforcement in Safe Browsing CVE-2020-6415 — chromium-browser: Inappropriate implementation in JavaScript CVE-2020-6416 — chromium-browser: Insufficient data validation in streams CVE-2020-6417 — chromium-browser: Inappropriate implementation in installer CVE-2020-6499 — chromium-browser: Inappropriate implementation in AppCache CVE-2020-6500 — chromium-browser: Inappropriate implementation in interstitials CVE-2020-6501 — chromium-browser: Insufficient policy enforcement in CSP CVE-2020-6502 — chromium-browser: Incorrect security UI in permissions
🎯 Affected products18
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (41)
- selfhttps://access.redhat.com/errata/RHSA-2020:0514
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1770768
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1787032
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1788846
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1788866
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1789364
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801160
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801161
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801162
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801163
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801164
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801165
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801166
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801167
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801168
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801169
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801170
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801171
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801172
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801173
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801174
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801175
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801176
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801177
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801178
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801179
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801180
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801181
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801182
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801184
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801185
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801186
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801187
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801188
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801189
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801190
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801191
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801192
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801193
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0514.json