Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 24

• High 8.8
  CVE-2018-6065 Exploited Public exploit EPSS 60%

  Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018

  KEV Jun 8, 2022
• Unscored —
  CVE-2018-6057

  Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had comp…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6060

  Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6061

  A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6062

  Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of boun…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6063

  Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6064 Public exploit

  Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6066 Public exploit

  Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remo…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6067

  Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially ex…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6069

  Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bo…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6070

  Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convince…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6071

  An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of boun…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6072

  An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attack…

  chromium-browser oxide-qt Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6073

  A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6074

  Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypa…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6075

  Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6076

  Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote att…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6077

  Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.332…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6078

  Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacke…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6079

  Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6080

  Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6081

  XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user t…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6082

  Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remo…

  chromium-browser oxide-qt Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-6083

  Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 al…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552476
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552477
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552478
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552479
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552480
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552481
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552484
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552486
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552488
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552489
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552495
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552499
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552500
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0484.json
• report
  https://access.redhat.com/security/cve/CVE-2018-6057
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6057
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6057
• article
  https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-6060
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6060
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6060
• report
  https://access.redhat.com/security/cve/CVE-2018-6061
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6061
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6061
• report
  https://access.redhat.com/security/cve/CVE-2018-6062
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6062
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6062