Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 15

• Unscored —
  CVE-2020-6542

  Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6543

  Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6544

  Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6545

  Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6546

  Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potential…

  Google Chrome chromium-browser Browsers Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6547

  Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6548

  Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6549 EPSS 28%

  Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6550 EPSS 28%

  Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6551 EPSS 28%

  Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6552

  Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6553

  Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6554

  Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6555

  Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6556

  Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially ex…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867939
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867940
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867942
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867944
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867945
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867946
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867948
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867949
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867950
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867951
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1867952
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870002
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3560.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6542
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6542
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6542
• article
  https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6543
• report
  https://access.redhat.com/security/cve/CVE-2020-6544
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6544
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6544
• report
  https://access.redhat.com/security/cve/CVE-2020-6545
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6545
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6545
• report
  https://access.redhat.com/security/cve/CVE-2020-6546
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6546
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6546
• report
  https://access.redhat.com/security/cve/CVE-2020-6547
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6547
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6547
• report
  https://access.redhat.com/security/cve/CVE-2020-6548
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6548
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6548