RHSA-2020:0514HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
February 17, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (42)

📋 Description

CVE-2019-18197 — libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure CVE-2019-19880 — sqlite: invalid pointer dereference in exprListAppendList in window.c CVE-2019-19923 — sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference CVE-2019-19925 — sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive CVE-2019-19926 — sqlite: error mishandling because of incomplete fix of CVE-2019-19880 CVE-2020-6381 — chromium-browser: Integer overflow in JavaScript CVE-2020-6382 — chromium-browser: Type Confusion in JavaScript CVE-2020-6385 — chromium-browser: Insufficient policy enforcement in storage CVE-2020-6387 — chromium-browser: Out of bounds write in WebRTC CVE-2020-6388 — chromium-browser: Out of bounds memory access in WebAudio CVE-2020-6389 — chromium-browser: Out of bounds write in WebRTC CVE-2020-6390 — chromium-browser: Out of bounds memory access in streams CVE-2020-6391 — chromium-browser: Insufficient validation of untrusted input in Blink CVE-2020-6392 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6393 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6394 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6395 — chromium-browser: Out of bounds read in JavaScript CVE-2020-6396 — chromium-browser: Inappropriate implementation in Skia CVE-2020-6397 — chromium-browser: Incorrect security UI in sharing CVE-2020-6398 — chromium-browser: Uninitialized use in PDFium CVE-2020-6399 — chromium-browser: Insufficient policy enforcement in AppCache CVE-2020-6400 — chromium-browser: Inappropriate implementation in CORS CVE-2020-6401 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6402 — chromium-browser: Insufficient policy enforcement in downloads CVE-2020-6403 — chromium-browser: Incorrect security UI in Omnibox CVE-2020-6404 — chromium-browser: Inappropriate implementation in Blink CVE-2020-6405 — sqlite: Out-of-bounds read in SELECT with ON/USING clause CVE-2020-6406 — chromium-browser: Use after free in audio CVE-2020-6408 — chromium-browser: Insufficient policy enforcement in CORS CVE-2020-6409 — chromium-browser: Inappropriate implementation in Omnibox CVE-2020-6410 — chromium-browser: Insufficient policy enforcement in navigation CVE-2020-6411 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6412 — chromium-browser: Insufficient validation of untrusted input in Omnibox CVE-2020-6413 — chromium-browser: Inappropriate implementation in Blink CVE-2020-6414 — chromium-browser: Insufficient policy enforcement in Safe Browsing CVE-2020-6415 — chromium-browser: Inappropriate implementation in JavaScript CVE-2020-6416 — chromium-browser: Insufficient data validation in streams CVE-2020-6417 — chromium-browser: Inappropriate implementation in installer CVE-2020-6499 — chromium-browser: Inappropriate implementation in AppCache CVE-2020-6500 — chromium-browser: Inappropriate implementation in interstitials CVE-2020-6501 — chromium-browser: Insufficient policy enforcement in CSP CVE-2020-6502 — chromium-browser: Incorrect security UI in permissions

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (41)