Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 9

• Unscored —
  CVE-2019-20503

  usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

  chromium chromium-browser thunderbird firefox Debian Ubuntu Azure Linux Alpine
  Mar 6, 2020
• Unscored —
  CVE-2020-6422

  Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6424

  Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6425

  Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 23, 2020
• Unscored —
  CVE-2020-6426

  Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6427

  Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6428

  Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6429

  Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 20, 2020
• Unscored —
  CVE-2020-6449

  Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Mar 20, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812203
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815242
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815243
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815245
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815247
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815259
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1270.json
• report
  https://access.redhat.com/security/cve/CVE-2019-20503
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20503
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20503
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2019-20503
• report
  https://access.redhat.com/security/cve/CVE-2020-6422
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6422
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6422
• article
  https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6424
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6424
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6424
• report
  https://access.redhat.com/security/cve/CVE-2020-6425
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6425
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6425
• report
  https://access.redhat.com/security/cve/CVE-2020-6426
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6426
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6426
• report
  https://access.redhat.com/security/cve/CVE-2020-6427
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6427
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6427
• report
  https://access.redhat.com/security/cve/CVE-2020-6428
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6428
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6428
• report
  https://access.redhat.com/security/cve/CVE-2020-6429
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6429
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6429
• report
  https://access.redhat.com/security/cve/CVE-2020-6449
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6449