Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 13

• Unscored —
  CVE-2020-6559

  Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6560

  Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6561

  Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6562

  Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6563

  Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6564

  Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof t…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6565

  Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoo…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6566

  Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6567

  Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6568

  Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6569

  Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the ren…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6570

  Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially se…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6571

  Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform dom…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872945
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872946
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872948
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872949
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872950
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872951
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872952
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872953
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1872958
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3723.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6559
• article
  https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6560
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6560
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6560
• report
  https://access.redhat.com/security/cve/CVE-2020-6561
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6561
• report
  https://access.redhat.com/security/cve/CVE-2020-6562
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6562
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6562
• report
  https://access.redhat.com/security/cve/CVE-2020-6563
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6563
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6563
• report
  https://access.redhat.com/security/cve/CVE-2020-6564
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6564
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6564
• report
  https://access.redhat.com/security/cve/CVE-2020-6565
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6565
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6565
• report
  https://access.redhat.com/security/cve/CVE-2020-6566
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6566