RHSA-2020:4235CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
October 13, 2020
Last Modified
November 12, 2026

🔗 CVE IDs covered (27)

CVE-2020-15984 →CVE-2020-15985 →CVE-2020-15988 →CVE-2020-6557 →CVE-2020-15967 →CVE-2020-15976 →CVE-2020-15978 →CVE-2020-15986 →CVE-2020-15992 →CVE-2020-15969 →CVE-2020-15971 →CVE-2020-15972 →CVE-2020-15975 →CVE-2020-15991 →CVE-2020-15973 →CVE-2020-15977 →CVE-2020-15979 →CVE-2020-15981 →CVE-2020-15982 →CVE-2020-15987 →CVE-2020-15989 →CVE-2020-15990 →CVE-2020-15968 →CVE-2020-15970 →CVE-2020-15974 →CVE-2020-15980 →CVE-2020-15983 →

📋 Description

CVE-2020-6557 — chromium-browser: Inappropriate implementation in networking CVE-2020-15967 — chromium-browser: Use after free in payments CVE-2020-15968 — chromium-browser: Use after free in Blink CVE-2020-15969 — chromium-browser: Use after free in WebRTC CVE-2020-15970 — chromium-browser: Use after free in NFC CVE-2020-15971 — chromium-browser: Use after free in printing CVE-2020-15972 — chromium-browser: Use after free in audio CVE-2020-15973 — chromium-browser: Insufficient policy enforcement in extensions CVE-2020-15974 — chromium-browser: Integer overflow in Blink CVE-2020-15975 — chromium-browser: Integer overflow in SwiftShader CVE-2020-15976 — chromium-browser: Use after free in WebXR CVE-2020-15977 — chromium-browser: Insufficient data validation in dialogs CVE-2020-15978 — chromium-browser: Insufficient data validation in navigation CVE-2020-15979 — chromium-browser: Inappropriate implementation in V8 CVE-2020-15980 — chromium-browser: Insufficient policy enforcement in Intents CVE-2020-15981 — chromium-browser: Out of bounds read in audio CVE-2020-15982 — chromium-browser: Side-channel information leakage in cache CVE-2020-15983 — chromium-browser: Insufficient data validation in webUI CVE-2020-15984 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2020-15985 — chromium-browser: Inappropriate implementation in Blink CVE-2020-15986 — chromium-browser: Integer overflow in media CVE-2020-15987 — chromium-browser: Use after free in WebRTC CVE-2020-15988 — chromium-browser: Insufficient policy enforcement in downloads CVE-2020-15989 — chromium-browser: Uninitialized use in PDFium CVE-2020-15990 — chromium-browser: Use after free in autofill CVE-2020-15991 — chromium-browser: Use after free in password manager CVE-2020-15992 — chromium-browser: Insufficient policy enforcement in networking

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (30)