Red Hat Security Advisory

RHSA-2018:3648

chromium-browser security update

Released 2018-11-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-70.0.3538.110-1.el6_10
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-70.0.3538.110-1.el6_10
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-70.0.3538.110-1.el6_10

Fixes 2 records

TI-2018-12470 CVE-2018-17479 · GHSA-x2q7-fcrc-98r2

Use after free in Google Chrome

MEDIUM 40

Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00882 Published 2019-06-27 Fixed in 70.0.3538.110 CWE-416

TI-2018-12469 CVE-2018-17478 · GHSA-f8rm-6c2h-r7wf

Improper array index validation in Google Chrome

MEDIUM 40

Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01104 Published 2019-06-27 Fixed in 70.0.3538.102 CWE-129