Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (13)
📋 Description
CVE-2020-6559 — chromium-browser: Use after free in presentation API CVE-2020-6560 — chromium-browser: Insufficient policy enforcement in autofill CVE-2020-6561 — chromium-browser: Inappropriate implementation in Content Security Policy CVE-2020-6562 — chromium-browser: Insufficient policy enforcement in Blink CVE-2020-6563 — chromium-browser: Insufficient policy enforcement in intent handling CVE-2020-6564 — chromium-browser: Incorrect security UI in permissions CVE-2020-6565 — chromium-browser: Incorrect security UI in Omnibox CVE-2020-6566 — chromium-browser: Insufficient policy enforcement in media CVE-2020-6567 — chromium-browser: Insufficient validation of untrusted input in command line handling CVE-2020-6568 — chromium-browser: Insufficient policy enforcement in intent handling CVE-2020-6569 — chromium-browser: Integer overflow in WebUSB CVE-2020-6570 — chromium-browser: Side-channel information leakage in WebRTC CVE-2020-6571 — chromium-browser: Incorrect security UI in Omnibox
🎯 Affected products18
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:85.0.4183.83-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2020:3723
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872945
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872946
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872947
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872948
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872949
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872950
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872951
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872952
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872953
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872955
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872956
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872957
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1872958
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3723.json