Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 2

• Unscored —
  CVE-2020-6464

  Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6831

  A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  May 26, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1831763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1832488
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2064.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6464
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6464
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6464
• article
  https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6831
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6831
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6831
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/#CVE-2020-6831