RHEL 6 : chromium-browser (RHSA-2018:3803)

Medium Nessus Plugin ID 119568

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 6.7

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Chromium is an open source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 71.0.3578.80.

Security Fix(es) :

* chromium-browser: Out of bounds write in V8 (CVE-2018-17480)

* chromium-browser: Use after frees in PDFium (CVE-2018-17481)

* chromium-browser: Heap buffer overflow in Skia (CVE-2018-18335)

* chromium-browser: Use after free in PDFium (CVE-2018-18336)

* chromium-browser: Use after free in Blink (CVE-2018-18337)

* chromium-browser: Heap buffer overflow in Canvas (CVE-2018-18338)

* chromium-browser: Use after free in WebAudio (CVE-2018-18339)

* chromium-browser: Use after free in MediaRecorder (CVE-2018-18340)

* chromium-browser: Heap buffer overflow in Blink (CVE-2018-18341)

* chromium-browser: Out of bounds write in V8 (CVE-2018-18342)

* chromium-browser: Use after free in Skia (CVE-2018-18343)

* chromium-browser: Inappropriate implementation in Extensions (CVE-2018-18344)

* chromium-browser: Inappropriate implementation in Site Isolation (CVE-2018-18345)

* chromium-browser: Incorrect security UI in Blink (CVE-2018-18346)

* chromium-browser: Inappropriate implementation in Navigation (CVE-2018-18347)

* chromium-browser: Inappropriate implementation in Omnibox (CVE-2018-18348)

* chromium-browser: Insufficient policy enforcement in Blink (CVE-2018-18349)

* chromium-browser: Insufficient policy enforcement in Blink (CVE-2018-18350)

* chromium-browser: Insufficient policy enforcement in Navigation (CVE-2018-18351)

* chromium-browser: Inappropriate implementation in Media (CVE-2018-18352)

* chromium-browser: Inappropriate implementation in Network Authentication (CVE-2018-18353)

* chromium-browser: Insufficient data validation in Shell Integration (CVE-2018-18354)

* chromium-browser: Insufficient policy enforcement in URL Formatter (CVE-2018-18355)

* chromium-browser: Use after free in Skia (CVE-2018-18356)

* chromium-browser: Insufficient policy enforcement in URL Formatter (CVE-2018-18357)

* chromium-browser: Insufficient policy enforcement in Proxy (CVE-2018-18358)

* chromium-browser: Out of bounds read in V8 (CVE-2018-18359)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Update the affected chromium-browser and / or chromium-browser-debuginfo packages.

RHEL 6 : chromium-browser (RHSA-2018:3803)

Medium Nessus Plugin ID 119568

New! Vulnerability Priority Rating (VPR)

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerability Information

Reference Information