Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 17

• High 8.8
  CVE-2018-17463 Exploited Public exploit EPSS 85%

  Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018

  KEV Jun 8, 2022
• Unscored —
  CVE-2018-16435

  Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats…

  chromium-browser oxide-qt openjdk8 openjpeg2 Debian Ubuntu Azure Linux Alpine
  Sep 4, 2018
• Unscored —
  CVE-2018-17462

  Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17464

  Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17465

  Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to p…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17466

  Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out …

  Google Chrome chromium-browser thunderbird Browsers Debian Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17467

  Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17468

  Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a rem…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17469

  Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to p…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17470

  A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-17471

  Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure t…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17473

  Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17474

  Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to po…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17475

  Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17476

  Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the f…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-17477

  Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-5179

  A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to …

  chromium-browser oxide-qt Browsers Ubuntu
  Apr 26, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628969
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640098
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640100
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640101
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640102
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640103
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640104
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640105
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640106
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640107
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640112
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640115
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3004.json
• report
  https://access.redhat.com/security/cve/CVE-2018-5179
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5179
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5179
• article
  https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-16435
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16435
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16435
• report
  https://access.redhat.com/security/cve/CVE-2018-17462
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17462
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17462
• report
  https://access.redhat.com/security/cve/CVE-2018-17463
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17463
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17463
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2018-17464
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17464
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17464
• report
  https://access.redhat.com/security/cve/CVE-2018-17465
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17465
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17465