Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 rhel_extras:6 | chromium-browser | 0:64.0.3282.119-1.el6_9 |
| Red Hat · RHEL 6 rhel_extras:6 | chromium-browser-debuginfo | 0:64.0.3282.119-1.el6_9 |
Vulnerabilities 25
-
Unscored —
Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentia…
-
Unscored —
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an o…
-
Unscored —
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potent…
-
Unscored —
Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially lea…
-
Unscored —
Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain au…
-
Unscored —
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bo…
-
Unscored —
Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the cont…
-
Unscored —
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the content…
-
Unscored —
Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote atta…
-
Unscored —
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potent…
-
Unscored —
Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential…
-
Unscored —
Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof …
-
Unscored —
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the content…
-
Unscored —
XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the pag…
-
Unscored —
Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a …
-
Unscored —
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view w…
-
Unscored —
Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to…
-
Unscored —
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the content…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538503
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538504
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538505
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538506
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538507
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538508
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538509
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538510
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538511
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538512
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538513
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538514
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538515
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538516
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538517
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538518
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538519
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538520
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538522
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538523
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538524
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538525
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1538526
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0265.json
-
report
https://access.redhat.com/security/cve/CVE-2018-6031
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-6031
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-6031
-
report
https://access.redhat.com/security/cve/CVE-2018-6032
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-6032
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-6032
-
report
https://access.redhat.com/security/cve/CVE-2018-6033
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-6033
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-6033
-
report
https://access.redhat.com/security/cve/CVE-2018-6034
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-6034
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-6034
-
report
https://access.redhat.com/security/cve/CVE-2018-6035