RHSA-2020:1487HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
April 16, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (24)

CVE-2020-6434 →CVE-2020-6435 →CVE-2020-6440 →CVE-2020-6441 →CVE-2020-6442 →CVE-2020-6447 →CVE-2020-6419 →CVE-2020-6437 →CVE-2020-6446 →CVE-2020-6455 →CVE-2020-6430 →CVE-2020-6431 →CVE-2020-6432 →CVE-2020-6438 →CVE-2020-6439 →CVE-2020-6443 →CVE-2020-6445 →CVE-2020-6456 →CVE-2020-6423 →CVE-2020-6436 →CVE-2020-6444 →CVE-2020-6448 →CVE-2020-6454 →CVE-2020-6433 →

📋 Description

CVE-2020-6419 — chromium-browser: Out of bounds read and write in V8 CVE-2020-6423 — chromium-browser: Use after free in audio CVE-2020-6430 — chromium-browser: Type Confusion in V8 CVE-2020-6431 — chromium-browser: Insufficient policy enforcement in full screen CVE-2020-6432 — chromium-browser: Insufficient policy enforcement in navigations CVE-2020-6433 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6434 — chromium-browser: Use after free in devtools CVE-2020-6435 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6436 — chromium-browser: Use after free in window management CVE-2020-6437 — chromium-browser: Inappropriate implementation in WebView CVE-2020-6438 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-6439 — chromium-browser: Insufficient policy enforcement in navigations CVE-2020-6440 — chromium-browser: Inappropriate implementation in extensions CVE-2020-6441 — chromium-browser: Insufficient policy enforcement in omnibox CVE-2020-6442 — chromium-browser: Inappropriate implementation in cache CVE-2020-6443 — chromium-browser: Insufficient data validation in developer tools CVE-2020-6444 — chromium-browser: Uninitialized use in WebRTC CVE-2020-6445 — chromium-browser: Insufficient policy enforcement in trusted types CVE-2020-6446 — chromium-browser: Insufficient policy enforcement in trusted types CVE-2020-6447 — chromium-browser: Inappropriate implementation in developer tools CVE-2020-6448 — chromium-browser: Use after free in V8 CVE-2020-6454 — chromium-browser: Use after free in extensions CVE-2020-6455 — chromium-browser: Out of bounds read in WebSQL CVE-2020-6456 — chromium-browser: Insufficient validation of untrusted input in clipboard

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:81.0.4044.92-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (26)