Red Hat Security Advisory

RHSA-2020:0214

chromium-browser security update

Released 2020-01-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-79.0.3945.130-1.el6_10
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-79.0.3945.130-1.el6_10
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-79.0.3945.130-1.el6_10
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-79.0.3945.130-1.el6_10

Fixes 3 records

TI-2020-05231 CVE-2020-6380 · GHSA-vhfr-653c-g79j

Incorrect authorization in Google Chrome

MEDIUM 40

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01195 Published 2020-02-11 Fixed in 79.0.3945.130 CWE-863

TI-2020-05230 CVE-2020-6379 · GHSA-hw3m-8gm5-mc75

Use after free in Google Chrome

MEDIUM 40

Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01178 Published 2020-02-11 Fixed in 79.0.3945.130 CWE-416

TI-2020-05229 CVE-2020-6378 · GHSA-mw97-4r24-9ggw

Use after free in Google Chrome

MEDIUM 40

Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01218 Published 2020-02-11 Fixed in 79.0.3945.130 CWE-416