RHSA-2020:2544HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
June 15, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (30)

CVE-2020-6490 →CVE-2020-6491 →CVE-2020-6493 →CVE-2020-6494 →CVE-2020-6479 →CVE-2020-6485 →CVE-2020-6483 →CVE-2020-6484 →CVE-2020-6466 →CVE-2020-6468 →CVE-2020-6476 →CVE-2020-6465 →CVE-2020-6470 →CVE-2020-6489 →CVE-2020-6467 →CVE-2020-6469 →CVE-2020-6472 →CVE-2020-6486 →CVE-2020-6496 →CVE-2020-6471 →CVE-2020-6473 →CVE-2020-6475 →CVE-2020-6481 →CVE-2020-6487 →CVE-2020-6495 →CVE-2020-6480 →CVE-2020-6488 →CVE-2020-6474 →CVE-2020-6478 →CVE-2020-6482 →

📋 Description

CVE-2020-6465 — chromium-browser: Use after free in reader mode CVE-2020-6466 — chromium-browser: Use after free in media CVE-2020-6467 — chromium-browser: Use after free in WebRTC CVE-2020-6468 — chromium-browser: Type Confusion in V8 CVE-2020-6469 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2020-6470 — chromium-browser: Insufficient validation of untrusted input in clipboard CVE-2020-6471 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2020-6472 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2020-6473 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6474 — chromium-browser: Use after free in Blink CVE-2020-6475 — chromium-browser: Incorrect security UI in full screen CVE-2020-6476 — chromium-browser: Insufficient policy enforcement in tab strip CVE-2020-6478 — chromium-browser: Inappropriate implementation in full screen CVE-2020-6479 — chromium-browser: Inappropriate implementation in sharing CVE-2020-6480 — chromium-browser: Insufficient policy enforcement in enterprise CVE-2020-6481 — chromium-browser: Insufficient policy enforcement in URL formatting CVE-2020-6482 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2020-6483 — chromium-browser: Insufficient policy enforcement in payments CVE-2020-6484 — chromium-browser: Insufficient data validation in ChromeDriver CVE-2020-6485 — chromium-browser: Insufficient data validation in media router CVE-2020-6486 — chromium-browser: Insufficient policy enforcement in navigations CVE-2020-6487 — chromium-browser: Insufficient policy enforcement in downloads CVE-2020-6488 — chromium-browser: Insufficient policy enforcement in downloads CVE-2020-6489 — chromium-browser: Inappropriate implementation in developer tools CVE-2020-6490 — chromium-browser: Insufficient data validation in loader CVE-2020-6491 — chromium-browser: Incorrect security UI in site information CVE-2020-6493 — chromium-browser: Use after free in WebAuthentication CVE-2020-6494 — chromium-browser: Incorrect security UI in payments CVE-2020-6495 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2020-6496 — chromium-browser: Use after free in payments

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (33)