RHSA-2018:1815HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
June 7, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (23)

CVE-2018-6129 →CVE-2018-6132 →CVE-2018-6137 →CVE-2018-6139 →CVE-2018-6144 →CVE-2018-6123 →CVE-2018-6125 →CVE-2018-6127 →CVE-2018-6131 →CVE-2018-6134 →CVE-2018-6135 →CVE-2018-6136 →CVE-2018-6138 →CVE-2018-6124 →CVE-2018-6133 →CVE-2018-6140 →CVE-2018-6141 →CVE-2018-6147 →CVE-2018-6130 →CVE-2018-6142 →CVE-2018-6143 →CVE-2018-6145 →CVE-2018-6126 →

📋 Description

CVE-2018-6123 — chromium-browser: Use after free in Blink CVE-2018-6124 — chromium-browser: Type confusion in Blink CVE-2018-6125 — chromium-browser: Overly permissive policy in WebUSB CVE-2018-6126 — Skia: Heap buffer overflow rasterizing paths in SVG CVE-2018-6127 — chromium-browser: Use after free in indexedDB CVE-2018-6129 — chromium-browser: Out of bounds memory access in WebRTC CVE-2018-6130 — chromium-browser: Out of bounds memory access in WebRTC CVE-2018-6131 — chromium-browser: Incorrect mutability protection in WebAssembly CVE-2018-6132 — chromium-browser: Use of uninitialized memory in WebRTC CVE-2018-6133 — chromium-browser: URL spoof in Omnibox CVE-2018-6134 — chromium-browser: Referrer Policy bypass in Blink CVE-2018-6135 — chromium-browser: UI spoofing in Blink CVE-2018-6136 — chromium-browser: Out of bounds memory access in V8 CVE-2018-6137 — chromium-browser: Leak of visited status of page in Blink CVE-2018-6138 — chromium-browser: Overly permissive policy in Extensions CVE-2018-6139 — chromium-browser: Restrictions bypass in the debugger extension API CVE-2018-6140 — chromium-browser: Restrictions bypass in the debugger extension API CVE-2018-6141 — chromium-browser: Heap buffer overflow in Skia CVE-2018-6142 — chromium-browser: Out of bounds memory access in V8 CVE-2018-6143 — chromium-browser: Out of bounds memory access in V8 CVE-2018-6144 — chromium-browser: Out of bounds memory access in PDFium CVE-2018-6145 — chromium-browser: Incorrect escaping of MathML in Blink CVE-2018-6147 — chromium-browser: Password fields not taking advantage of OS protections in Views

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:67.0.3396.62-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (26)