RHSA-2018:0484HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
March 12, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (24)

CVE-2018-6077 →CVE-2018-6078 →CVE-2018-6080 →CVE-2018-6060 →CVE-2018-6064 →CVE-2018-6066 →CVE-2018-6069 →CVE-2018-6073 →CVE-2018-6075 →CVE-2018-6057 →CVE-2018-6061 →CVE-2018-6062 →CVE-2018-6063 →CVE-2018-6067 →CVE-2018-6071 →CVE-2018-6072 →CVE-2018-6074 →CVE-2018-6065 →CVE-2018-6070 →CVE-2018-6076 →CVE-2018-6079 →CVE-2018-6081 →CVE-2018-6082 →CVE-2018-6083 →

📋 Description

CVE-2018-6057 — chromium-browser: incorrect permissions on shared memory CVE-2018-6060 — chromium-browser: use-after-free in blink CVE-2018-6061 — chromium-browser: race condition in v8 CVE-2018-6062 — chromium-browser: heap buffer overflow in skia CVE-2018-6063 — chromium-browser: incorrect permissions on shared memory CVE-2018-6064 — chromium-browser: type confusion in v8 CVE-2018-6065 — chromium-browser: integer overflow in v8 CVE-2018-6066 — chromium-browser: same origin bypass via canvas CVE-2018-6067 — chromium-browser: buffer overflow in skia CVE-2018-6069 — chromium-browser: stack buffer overflow in skia CVE-2018-6070 — chromium-browser: csp bypass through extensions CVE-2018-6071 — chromium-browser: heap bufffer overflow in skia CVE-2018-6072 — chromium-browser: integer overflow in pdfium CVE-2018-6073 — chromium-browser: heap bufffer overflow in webgl CVE-2018-6074 — chromium-browser: mark-of-the-web bypass CVE-2018-6075 — chromium-browser: overly permissive cross origin downloads CVE-2018-6076 — chromium-browser: incorrect handling of url fragment identifiers in blink CVE-2018-6077 — chromium-browser: timing attack using svg filters CVE-2018-6078 — chromium-browser: url spoof in omnibox CVE-2018-6079 — chromium-browser: information disclosure via texture data in webgl CVE-2018-6080 — chromium-browser: information disclosure in ipc call CVE-2018-6081 — chromium-browser: xss in interstitials CVE-2018-6082 — chromium-browser: circumvention of port blocking CVE-2018-6083 — chromium-browser: incorrect processing of appmanifests

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:65.0.3325.146-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (27)