Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 23

• Unscored —
  CVE-2018-6123

  A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6124

  Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentia…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6125

  Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to o…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 2, 2021
• Unscored —
  CVE-2018-6126 Public exploit

  A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds …

  Google Chrome chromium-browser thunderbird Browsers Debian Ubuntu Alpine
  Jan 9, 2019
• Unscored —
  CVE-2018-6127

  Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had comprom…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6129 Public exploit

  Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially pe…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6130 Public exploit

  Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to po…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6131

  Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially e…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6132

  Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6133

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6134

  Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6135

  Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6136

  Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds m…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6137

  CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6138

  Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convin…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6139

  Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an att…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6140

  Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed a…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6141

  Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6142

  Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6143

  Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bou…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6144

  Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6145

  Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6147

  Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584033
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584035
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584037
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584039
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584040
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584042
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584043
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584044
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584045
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584046
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584047
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584049
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584050
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584051
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584054
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584055
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584057
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584058
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1815.json
• report
  https://access.redhat.com/security/cve/CVE-2018-6123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6123
• article
  https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
• report
  https://access.redhat.com/security/cve/CVE-2018-6124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6124
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6124
• report
  https://access.redhat.com/security/cve/CVE-2018-6125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6125
• report
  https://access.redhat.com/security/cve/CVE-2018-6126
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6126
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6126
• report
  https://access.redhat.com/security/cve/CVE-2018-6127