Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 32

• Unscored —
  CVE-2018-6085

  Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6086

  A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6087

  A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6088

  An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arb…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6089

  A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prio…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6090

  An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remot…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6091

  Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6092 Public exploit

  An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6093

  Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-ori…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6094

  Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially e…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6095

  Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a re…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6096

  A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6097

  Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a rem…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6098

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6099

  A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6100

  Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6101

  A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbi…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6102

  Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6103

  A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass per…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6104

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6105

  Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacke…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6106

  An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6107

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6108

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6109

  readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6110

  Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrom…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6111

  An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6112

  Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remo…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6113

  Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6114

  Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attack…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6116

  A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially p…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6117

  Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568766
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568767
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568769
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568770
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568773
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568776
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568779
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568785
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568787
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568789
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568790
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568791
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568792
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568794
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568796
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568797
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1195.json
• report
  https://access.redhat.com/security/cve/CVE-2018-6085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6085
• article
  https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-6086