Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 31

• Unscored —
  CVE-2018-16064

  Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced…

  Google Chrome Browsers
  Jun 27, 2019
• Unscored —
  CVE-2018-4117

  An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud …

  chromium-browser qtwebkit-source qtwebkit-opensource-src webkit2gtk Debian Ubuntu
  Apr 3, 2018
• Unscored —
  CVE-2018-6150

  Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak c…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6151

  Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who conv…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6152

  The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-6153

  A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the rend…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6154

  Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially e…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6155

  Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to pote…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6156

  Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to po…

  Google Chrome chromium-browser firefox Browsers Ubuntu Alpine
  Jun 27, 2019
• Unscored —
  CVE-2018-6157

  Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6158

  A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6159

  Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to ob…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6161

  Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass sam…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6162

  Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentiall…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6163

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6164

  Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6165

  Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof t…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6166

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6167

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6168

  Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6169

  Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attac…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6170

  A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6171

  Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6172

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6173

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6174

  Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execut…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6175

  Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote at…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6176

  Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker w…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6177

  Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6178

  Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who co…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6179

  Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608177
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608179
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608180
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608181
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608182
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608183
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608185
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608186
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608189
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608191
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608192
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608193
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608196
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608197
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608199
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608203
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608204
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608205
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608206
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608208
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2282.json
• report
  https://access.redhat.com/security/cve/CVE-2018-4117
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-4117
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-4117
• article
  https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-6150
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6150