RHSA-2020:1270HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
April 1, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (9)

CVE-2020-6422 →CVE-2020-6424 →CVE-2020-6426 →CVE-2020-6427 →CVE-2020-6428 →CVE-2020-6429 →CVE-2020-6449 →CVE-2019-20503 →CVE-2020-6425 →

📋 Description

CVE-2019-20503 — usrsctp: Out of bounds reads in sctp_load_addresses_from_init() CVE-2020-6422 — chromium-browser: Use after free in WebGL CVE-2020-6424 — chromium-browser: Use after free in media CVE-2020-6425 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6426 — chromium-browser: Inappropriate implementation in V8 CVE-2020-6427 — chromium-browser: Use after free in audio CVE-2020-6428 — chromium-browser: Use after free in audio CVE-2020-6429 — chromium-browser: Use after free in audio CVE-2020-6449 — chromium-browser: Use after free in audio

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:80.0.3987.149-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (12)