RHSA-2020:3377CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
August 10, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (32)

CVE-2020-6540 →CVE-2020-6514 →CVE-2020-6516 →CVE-2020-6524 →CVE-2020-6526 →CVE-2020-6529 →CVE-2020-6530 →CVE-2020-6515 →CVE-2020-6518 →CVE-2020-6523 →CVE-2020-6513 →CVE-2020-6527 →CVE-2020-6536 →CVE-2020-6538 →CVE-2020-6512 →CVE-2020-6517 →CVE-2020-6520 →CVE-2020-6525 →CVE-2020-6531 →CVE-2020-6534 →CVE-2020-6541 →CVE-2020-6537 →CVE-2020-6510 →CVE-2020-6511 →CVE-2020-6521 →CVE-2020-6522 →CVE-2020-6532 →CVE-2020-6535 →CVE-2020-6539 →CVE-2020-6519 →CVE-2020-6528 →CVE-2020-6533 →

📋 Description

CVE-2020-6510 — chromium-browser: Heap buffer overflow in background fetch CVE-2020-6511 — chromium-browser: Side-channel information leakage in content security policy CVE-2020-6512 — chromium-browser: Type Confusion in V8 CVE-2020-6513 — chromium-browser: Heap buffer overflow in PDFium CVE-2020-6514 — chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6515 — chromium-browser: Use after free in tab strip CVE-2020-6516 — chromium-browser: Policy bypass in CORS CVE-2020-6517 — chromium-browser: Heap buffer overflow in history CVE-2020-6518 — chromium-browser: Use after free in developer tools CVE-2020-6519 — chromium-browser: Policy bypass in CSP CVE-2020-6520 — chromium-browser: Heap buffer overflow in Skia CVE-2020-6521 — chromium-browser: Side-channel information leakage in autofill CVE-2020-6522 — chromium-browser: Inappropriate implementation in external protocol handlers CVE-2020-6523 — chromium-browser: Out of bounds write in Skia CVE-2020-6524 — chromium-browser: Heap buffer overflow in WebAudio CVE-2020-6525 — chromium-browser: Heap buffer overflow in Skia CVE-2020-6526 — chromium-browser: Inappropriate implementation in iframe sandbox CVE-2020-6527 — chromium-browser: Insufficient policy enforcement in CSP CVE-2020-6528 — chromium-browser: Incorrect security UI in basic auth CVE-2020-6529 — chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6530 — chromium-browser: Out of bounds memory access in developer tools CVE-2020-6531 — chromium-browser: Side-channel information leakage in scroll to text CVE-2020-6532 — chromium-browser: Use after free in SCTP CVE-2020-6533 — chromium-browser: Type Confusion in V8 CVE-2020-6534 — chromium-browser: Heap buffer overflow in WebRTC CVE-2020-6535 — chromium-browser: Insufficient data validation in WebUI CVE-2020-6536 — chromium-browser: Incorrect security UI in PWAs CVE-2020-6537 — chromium-browser: Type Confusion in V8 CVE-2020-6538 — chromium-browser: Inappropriate implementation in WebView CVE-2020-6539 — chromium-browser: Use after free in CSS CVE-2020-6540 — chromium-browser: Heap buffer overflow in Skia CVE-2020-6541 — chromium-browser: Use after free in WebUSB

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (35)