RHSA-2018:3004HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
October 24, 2018
Last Modified
November 12, 2026

🔗 CVE IDs covered (17)

CVE-2018-17477 →CVE-2018-5179 →CVE-2018-17462 →CVE-2018-17470 →CVE-2018-17473 →CVE-2018-17464 →CVE-2018-17468 →CVE-2018-17475 →CVE-2018-17476 →CVE-2018-17465 →CVE-2018-17474 →CVE-2018-16435 →CVE-2018-17463 →CVE-2018-17466 →CVE-2018-17467 →CVE-2018-17469 →CVE-2018-17471 →

📋 Description

CVE-2018-5179 — chromium-browser: Lack of limits on update() in ServiceWorker CVE-2018-16435 — lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow CVE-2018-17462 — chromium-browser: Sandbox escape in AppCache CVE-2018-17463 — chromium-browser: Remote code execution in V8 CVE-2018-17464 — chromium-browser: URL spoof in Omnibox CVE-2018-17465 — chromium-browser: Use after free in V8 CVE-2018-17466 — firefox: Memory corruption in Angle CVE-2018-17467 — chromium-browser: URL spoof in Omnibox CVE-2018-17468 — chromium-browser: Cross-origin URL disclosure in Blink CVE-2018-17469 — chromium-browser: Heap buffer overflow in PDFium CVE-2018-17470 — chromium-browser: Memory corruption in GPU Internals CVE-2018-17471 — chromium-browser: Security UI occlusion in full screen mode CVE-2018-17473 — chromium-browser: URL spoof in Omnibox CVE-2018-17474 — chromium-browser: Use after free in Blink CVE-2018-17475 — chromium-browser: URL spoof in Omnibox CVE-2018-17476 — chromium-browser: Security UI occlusion in full screen mode CVE-2018-17477 — chromium-browser: UI spoof in Extensions

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:70.0.3538.67-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (20)