RHSA-2018:1195CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
April 23, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (32)

CVE-2018-6088 →CVE-2018-6096 →CVE-2018-6110 →CVE-2018-6116 →CVE-2018-6086 →CVE-2018-6090 →CVE-2018-6099 →CVE-2018-6105 →CVE-2018-6107 →CVE-2018-6087 →CVE-2018-6091 →CVE-2018-6100 →CVE-2018-6113 →CVE-2018-6093 →CVE-2018-6094 →CVE-2018-6095 →CVE-2018-6101 →CVE-2018-6103 →CVE-2018-6117 →CVE-2018-6102 →CVE-2018-6109 →CVE-2018-6092 →CVE-2018-6097 →CVE-2018-6104 →CVE-2018-6111 →CVE-2018-6085 →CVE-2018-6089 →CVE-2018-6112 →CVE-2018-6098 →CVE-2018-6106 →CVE-2018-6108 →CVE-2018-6114 →

📋 Description

CVE-2018-6085 — chromium-browser: Use after free in Disk Cache CVE-2018-6086 — chromium-browser: Use after free in Disk Cache CVE-2018-6087 — chromium-browser: Use after free in WebAssembly CVE-2018-6088 — chromium-browser: Use after free in PDFium CVE-2018-6089 — chromium-browser: Same origin policy bypass in Service Worker CVE-2018-6090 — chromium-browser: Heap buffer overflow in Skia CVE-2018-6091 — chromium-browser: Incorrect handling of plug-ins by Service Worker CVE-2018-6092 — chromium-browser: Integer overflow in WebAssembly CVE-2018-6093 — chromium-browser: Same origin bypass in Service Worker CVE-2018-6094 — chromium-browser: Exploit hardening regression in Oilpan CVE-2018-6095 — chromium-browser: Lack of meaningful user interaction requirement before file upload CVE-2018-6096 — chromium-browser: Fullscreen UI spoof CVE-2018-6097 — chromium-browser: Fullscreen UI spoof CVE-2018-6098 — chromium-browser: URL spoof in Omnibox CVE-2018-6099 — chromium-browser: CORS bypass in ServiceWorker CVE-2018-6100 — chromium-browser: URL spoof in Omnibox CVE-2018-6101 — chromium-browser: Insufficient protection of remote debugging prototol in DevTools CVE-2018-6102 — chromium-browser: URL spoof in Omnibox CVE-2018-6103 — chromium-browser: UI spoof in Permissions CVE-2018-6104 — chromium-browser: URL spoof in Omnibox CVE-2018-6105 — chromium-browser: URL spoof in Omnibox CVE-2018-6106 — chromium-browser: Incorrect handling of promises in V8 CVE-2018-6107 — chromium-browser: URL spoof in Omnibox CVE-2018-6108 — chromium-browser: URL spoof in Omnibox CVE-2018-6109 — chromium-browser: Incorrect handling of files by FileAPI CVE-2018-6110 — chromium-browser: Incorrect handling of plaintext files via file:// CVE-2018-6111 — chromium-browser: Heap-use-after-free in DevTools CVE-2018-6112 — chromium-browser: Incorrect URL handling in DevTools CVE-2018-6113 — chromium-browser: URL spoof in Navigation CVE-2018-6114 — chromium-browser: CSP bypass CVE-2018-6116 — chromium-browser: Incorrect low memory handling in WebAssembly CVE-2018-6117 — chromium-browser: Confusing autofill settings

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:66.0.3359.117-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (35)