Action not permitted
Modal body text goes here.
CVE-2020-6530
Vulnerability from cvelistv5
Published
2020-07-22 16:16
Modified
2024-08-04 09:02
Severity ?
EPSS score ?
Summary
Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T09:02:40.796Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://crbug.com/1016278" }, { "name": "openSUSE-SU-2020:1061", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "name": "GLSA-202007-08", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202007-08" }, { "name": "FEDORA-2020-bf684961d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/" }, { "name": "FEDORA-2020-84d87cbd50", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/" }, { "name": "openSUSE-SU-2020:1148", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "name": "openSUSE-SU-2020:1172", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "name": "openSUSE-SU-2020:1048", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" }, { "name": "DSA-4824", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2021/dsa-4824" }, { "name": "GLSA-202101-30", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202101-30" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Chrome", "vendor": "Google", "versions": [ { "lessThan": "84.0.4147.89", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en", "value": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension." } ], "problemTypes": [ { "descriptions": [ { "description": "Out of bounds memory access", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-01-26T02:06:51", "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://crbug.com/1016278" }, { "name": "openSUSE-SU-2020:1061", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "name": "GLSA-202007-08", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/202007-08" }, { "name": "FEDORA-2020-bf684961d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/" }, { "name": "FEDORA-2020-84d87cbd50", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/" }, { "name": "openSUSE-SU-2020:1148", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "name": "openSUSE-SU-2020:1172", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "name": "openSUSE-SU-2020:1048", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" }, { "name": "DSA-4824", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2021/dsa-4824" }, { "name": "GLSA-202101-30", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/202101-30" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "chrome-cve-admin@google.com", "ID": "CVE-2020-6530", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Chrome", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "84.0.4147.89" } ] } } ] }, "vendor_name": "Google" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Out of bounds memory access" } ] } ] }, "references": { "reference_data": [ { "name": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "refsource": "MISC", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "name": "https://crbug.com/1016278", "refsource": "MISC", "url": "https://crbug.com/1016278" }, { "name": "openSUSE-SU-2020:1061", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "name": "GLSA-202007-08", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202007-08" }, { "name": "FEDORA-2020-bf684961d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/" }, { "name": "FEDORA-2020-84d87cbd50", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/" }, { "name": "openSUSE-SU-2020:1148", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "name": "openSUSE-SU-2020:1172", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "name": "openSUSE-SU-2020:1048", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" }, { "name": "DSA-4824", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-4824" }, { "name": "GLSA-202101-30", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202101-30" } ] } } } }, "cveMetadata": { "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "assignerShortName": "Chrome", "cveId": "CVE-2020-6530", "datePublished": "2020-07-22T16:16:09", "dateReserved": "2020-01-08T00:00:00", "dateUpdated": "2024-08-04T09:02:40.796Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2020-6530\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2020-07-22T17:15:14.463\",\"lastModified\":\"2024-11-21T05:35:54.517\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.\"},{\"lang\":\"es\",\"value\":\"Un acceso a la memoria fuera de l\u00edmites en developer tools en Google Chrome versiones anteriores a 84.0.4147.89, permiti\u00f3 a un atacante que convenci\u00f3 a un usuario para instalar una extensi\u00f3n maliciosa, explotar potencialmente una corrupci\u00f3n de la pila por medio de una Extensi\u00f3n de Chrome dise\u00f1ada\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"84.0.4147.89\",\"matchCriteriaId\":\"81AE496D-903C-4459-8CD3-80E7790656CD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"40513095-7E6E-46B3-B604-C926F1BA3568\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"67E82302-4B77-44F3-97B1-24C18AC4A35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1016278\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/202007-08\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202101-30\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4824\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1016278\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202007-08\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202101-30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4824\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
gsd-2020-6530
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2020-6530", "description": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.", "id": "GSD-2020-6530", "references": [ "https://www.suse.com/security/cve/CVE-2020-6530.html", "https://www.debian.org/security/2021/dsa-4824", "https://access.redhat.com/errata/RHSA-2020:3377", "https://security.archlinux.org/CVE-2020-6530" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2020-6530" ], "details": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.", "id": "GSD-2020-6530", "modified": "2023-12-13T01:21:54.801495Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "chrome-cve-admin@google.com", "ID": "CVE-2020-6530", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Chrome", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "84.0.4147.89" } ] } } ] }, "vendor_name": "Google" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Out of bounds memory access" } ] } ] }, "references": { "reference_data": [ { "name": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "refsource": "MISC", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "name": "https://crbug.com/1016278", "refsource": "MISC", "url": "https://crbug.com/1016278" }, { "name": "openSUSE-SU-2020:1061", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "name": "GLSA-202007-08", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202007-08" }, { "name": "FEDORA-2020-bf684961d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/" }, { "name": "FEDORA-2020-84d87cbd50", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/" }, { "name": "openSUSE-SU-2020:1148", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "name": "openSUSE-SU-2020:1172", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "name": "openSUSE-SU-2020:1048", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" }, { "name": "DSA-4824", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-4824" }, { "name": "GLSA-202101-30", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202101-30" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "84.0.4147.89", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "chrome-cve-admin@google.com", "ID": "CVE-2020-6530" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-787" } ] } ] }, "references": { "reference_data": [ { "name": "https://crbug.com/1016278", "refsource": "MISC", "tags": [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ], "url": "https://crbug.com/1016278" }, { "name": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "refsource": "MISC", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "name": "openSUSE-SU-2020:1061", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "name": "GLSA-202007-08", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202007-08" }, { "name": "FEDORA-2020-bf684961d9", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/" }, { "name": "FEDORA-2020-84d87cbd50", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/" }, { "name": "openSUSE-SU-2020:1148", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "name": "openSUSE-SU-2020:1172", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "name": "openSUSE-SU-2020:1048", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" }, { "name": "DSA-4824", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2021/dsa-4824" }, { "name": "GLSA-202101-30", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202101-30" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 5.9 } }, "lastModifiedDate": "2021-07-21T11:39Z", "publishedDate": "2020-07-22T17:15Z" } } }
ghsa-4cg3-gfhj-x3xm
Vulnerability from github
Published
2022-05-24 17:24
Modified
2022-05-24 17:24
Details
Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
{ "affected": [], "aliases": [ "CVE-2020-6530" ], "database_specific": { "cwe_ids": [ "CWE-119" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-07-22T17:15:00Z", "severity": "MODERATE" }, "details": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.", "id": "GHSA-4cg3-gfhj-x3xm", "modified": "2022-05-24T17:24:10Z", "published": "2022-05-24T17:24:10Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6530" }, { "type": "WEB", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" }, { "type": "WEB", "url": "https://crbug.com/1016278" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202007-08" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202101-30" }, { "type": "WEB", "url": "https://www.debian.org/security/2021/dsa-4824" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html" } ], "schema_version": "1.4.0", "severity": [] }
rhsa-2020_3377
Vulnerability from csaf_redhat
Published
2020-08-10 06:40
Modified
2024-11-15 09:35
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 84.0.4147.105.
Security Fix(es):
* chromium-browser: Heap buffer overflow in background fetch (CVE-2020-6510)
* chromium-browser: Side-channel information leakage in content security policy (CVE-2020-6511)
* chromium-browser: Type Confusion in V8 (CVE-2020-6512)
* chromium-browser: Heap buffer overflow in PDFium (CVE-2020-6513)
* chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514)
* chromium-browser: Use after free in tab strip (CVE-2020-6515)
* chromium-browser: Policy bypass in CORS (CVE-2020-6516)
* chromium-browser: Heap buffer overflow in history (CVE-2020-6517)
* chromium-browser: Use after free in SCTP (CVE-2020-6532)
* chromium-browser: Type Confusion in V8 (CVE-2020-6537)
* chromium-browser: Inappropriate implementation in WebView (CVE-2020-6538)
* chromium-browser: Use after free in CSS (CVE-2020-6539)
* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6540)
* chromium-browser: Use after free in WebUSB (CVE-2020-6541)
* chromium-browser: Use after free in developer tools (CVE-2020-6518)
* chromium-browser: Policy bypass in CSP (CVE-2020-6519)
* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6520)
* chromium-browser: Side-channel information leakage in autofill (CVE-2020-6521)
* chromium-browser: Inappropriate implementation in external protocol handlers (CVE-2020-6522)
* chromium-browser: Out of bounds write in Skia (CVE-2020-6523)
* chromium-browser: Heap buffer overflow in WebAudio (CVE-2020-6524)
* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6525)
* chromium-browser: Inappropriate implementation in iframe sandbox (CVE-2020-6526)
* chromium-browser: Insufficient policy enforcement in CSP (CVE-2020-6527)
* chromium-browser: Incorrect security UI in basic auth (CVE-2020-6528)
* chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6529)
* chromium-browser: Out of bounds memory access in developer tools (CVE-2020-6530)
* chromium-browser: Side-channel information leakage in scroll to text (CVE-2020-6531)
* chromium-browser: Type Confusion in V8 (CVE-2020-6533)
* chromium-browser: Heap buffer overflow in WebRTC (CVE-2020-6534)
* chromium-browser: Insufficient data validation in WebUI (CVE-2020-6535)
* chromium-browser: Incorrect security UI in PWAs (CVE-2020-6536)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 84.0.4147.105.\n\nSecurity Fix(es):\n\n* chromium-browser: Heap buffer overflow in background fetch (CVE-2020-6510)\n\n* chromium-browser: Side-channel information leakage in content security policy (CVE-2020-6511)\n\n* chromium-browser: Type Confusion in V8 (CVE-2020-6512)\n\n* chromium-browser: Heap buffer overflow in PDFium (CVE-2020-6513)\n\n* chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514)\n\n* chromium-browser: Use after free in tab strip (CVE-2020-6515)\n\n* chromium-browser: Policy bypass in CORS (CVE-2020-6516)\n\n* chromium-browser: Heap buffer overflow in history (CVE-2020-6517)\n\n* chromium-browser: Use after free in SCTP (CVE-2020-6532)\n\n* chromium-browser: Type Confusion in V8 (CVE-2020-6537)\n\n* chromium-browser: Inappropriate implementation in WebView (CVE-2020-6538)\n\n* chromium-browser: Use after free in CSS (CVE-2020-6539)\n\n* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6540)\n\n* chromium-browser: Use after free in WebUSB (CVE-2020-6541)\n\n* chromium-browser: Use after free in developer tools (CVE-2020-6518)\n\n* chromium-browser: Policy bypass in CSP (CVE-2020-6519)\n\n* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6520)\n\n* chromium-browser: Side-channel information leakage in autofill (CVE-2020-6521)\n\n* chromium-browser: Inappropriate implementation in external protocol handlers (CVE-2020-6522)\n\n* chromium-browser: Out of bounds write in Skia (CVE-2020-6523)\n\n* chromium-browser: Heap buffer overflow in WebAudio (CVE-2020-6524)\n\n* chromium-browser: Heap buffer overflow in Skia (CVE-2020-6525)\n\n* chromium-browser: Inappropriate implementation in iframe sandbox (CVE-2020-6526)\n\n* chromium-browser: Insufficient policy enforcement in CSP (CVE-2020-6527)\n\n* chromium-browser: Incorrect security UI in basic auth (CVE-2020-6528)\n\n* chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6529)\n\n* chromium-browser: Out of bounds memory access in developer tools (CVE-2020-6530)\n\n* chromium-browser: Side-channel information leakage in scroll to text (CVE-2020-6531)\n\n* chromium-browser: Type Confusion in V8 (CVE-2020-6533)\n\n* chromium-browser: Heap buffer overflow in WebRTC (CVE-2020-6534)\n\n* chromium-browser: Insufficient data validation in WebUI (CVE-2020-6535)\n\n* chromium-browser: Incorrect security UI in PWAs (CVE-2020-6536)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:3377", "url": "https://access.redhat.com/errata/RHSA-2020:3377" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "1857320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857320" }, { "category": "external", "summary": "1857321", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857321" }, { "category": "external", "summary": "1857322", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857322" }, { "category": "external", "summary": "1857323", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857323" }, { "category": "external", "summary": "1857324", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857324" }, { "category": "external", "summary": "1857325", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857325" }, { "category": "external", "summary": "1857326", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857326" }, { "category": "external", "summary": "1857327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857327" }, { "category": "external", "summary": "1857328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857328" }, { "category": "external", "summary": "1857329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857329" }, { "category": "external", "summary": "1857330", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857330" }, { "category": "external", "summary": "1857331", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857331" }, { "category": "external", "summary": "1857332", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857332" }, { "category": "external", "summary": "1857333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857333" }, { "category": "external", "summary": "1857334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857334" }, { "category": "external", "summary": "1857336", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857336" }, { "category": "external", "summary": "1857337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857337" }, { "category": "external", "summary": "1857338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857338" }, { "category": "external", "summary": "1857339", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857339" }, { "category": "external", "summary": "1857340", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857340" }, { "category": "external", "summary": "1857341", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857341" }, { "category": "external", "summary": "1857342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857342" }, { "category": "external", "summary": "1857349", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857349" }, { "category": "external", "summary": "1857351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857351" }, { "category": "external", "summary": "1857352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857352" }, { "category": "external", "summary": "1857400", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857400" }, { "category": "external", "summary": "1861464", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861464" }, { "category": "external", "summary": "1861465", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861465" }, { "category": "external", "summary": "1861466", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861466" }, { "category": "external", "summary": "1861467", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861467" }, { "category": "external", "summary": "1861468", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861468" }, { "category": "external", "summary": "1861469", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861469" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3377.json" } ], "title": "Red Hat Security Advisory: chromium-browser security update", "tracking": { "current_release_date": "2024-11-15T09:35:48+00:00", "generator": { "date": "2024-11-15T09:35:48+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:3377", "initial_release_date": "2020-08-10T06:40:20+00:00", "revision_history": [ { "date": "2020-08-10T06:40:20+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-08-10T06:40:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T09:35:48+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "product": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "product_id": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser@84.0.4147.105-2.el6_10?arch=i686" } } }, { "category": "product_version", "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "product": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "product_id": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@84.0.4147.105-2.el6_10?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "product": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "product_id": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser@84.0.4147.105-2.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "product": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "product_id": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@84.0.4147.105-2.el6_10?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Client-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Client-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Server-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Server-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.10.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-6510", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857400" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in background fetch", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6510" }, { "category": "external", "summary": "RHBZ#1857400", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857400" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6510", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6510" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6510", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6510" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "chromium-browser: Heap buffer overflow in background fetch" }, { "cve": "CVE-2020-6511", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857320" } ], "notes": [ { "category": "description", "text": "Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Side-channel information leakage in content security policy", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6511" }, { "category": "external", "summary": "RHBZ#1857320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6511", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6511" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Side-channel information leakage in content security policy" }, { "cve": "CVE-2020-6512", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857321" } ], "notes": [ { "category": "description", "text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Type Confusion in V8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6512" }, { "category": "external", "summary": "RHBZ#1857321", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857321" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6512", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6512" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Type Confusion in V8" }, { "cve": "CVE-2020-6513", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857322" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in PDFium", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6513" }, { "category": "external", "summary": "RHBZ#1857322", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857322" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6513", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6513" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Heap buffer overflow in PDFium" }, { "cve": "CVE-2020-6514", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857349" } ], "notes": [ { "category": "description", "text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Inappropriate implementation in WebRTC", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6514" }, { "category": "external", "summary": "RHBZ#1857349", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857349" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6514", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6514" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Inappropriate implementation in WebRTC" }, { "cve": "CVE-2020-6515", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857323" } ], "notes": [ { "category": "description", "text": "Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Use after free in tab strip", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6515" }, { "category": "external", "summary": "RHBZ#1857323", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857323" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6515", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6515" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6515" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Use after free in tab strip" }, { "cve": "CVE-2020-6516", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857324" } ], "notes": [ { "category": "description", "text": "Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Policy bypass in CORS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6516" }, { "category": "external", "summary": "RHBZ#1857324", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857324" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6516", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6516" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Policy bypass in CORS" }, { "cve": "CVE-2020-6517", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857351" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in history", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6517" }, { "category": "external", "summary": "RHBZ#1857351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6517", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6517" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Heap buffer overflow in history" }, { "cve": "CVE-2020-6518", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857325" } ], "notes": [ { "category": "description", "text": "Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Use after free in developer tools", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6518" }, { "category": "external", "summary": "RHBZ#1857325", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857325" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6518", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6518" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6518" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Use after free in developer tools" }, { "cve": "CVE-2020-6519", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857326" } ], "notes": [ { "category": "description", "text": "Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Policy bypass in CSP", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6519" }, { "category": "external", "summary": "RHBZ#1857326", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857326" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6519", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6519" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6519", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6519" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Policy bypass in CSP" }, { "cve": "CVE-2020-6520", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857327" } ], "notes": [ { "category": "description", "text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in Skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6520" }, { "category": "external", "summary": "RHBZ#1857327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857327" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6520", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6520" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6520", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6520" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Heap buffer overflow in Skia" }, { "cve": "CVE-2020-6521", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857328" } ], "notes": [ { "category": "description", "text": "Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Side-channel information leakage in autofill", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6521" }, { "category": "external", "summary": "RHBZ#1857328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6521", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6521" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6521", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6521" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Side-channel information leakage in autofill" }, { "cve": "CVE-2020-6522", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857352" } ], "notes": [ { "category": "description", "text": "Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Inappropriate implementation in external protocol handlers", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6522" }, { "category": "external", "summary": "RHBZ#1857352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857352" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6522", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6522" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6522", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6522" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Inappropriate implementation in external protocol handlers" }, { "cve": "CVE-2020-6523", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857329" } ], "notes": [ { "category": "description", "text": "Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Out of bounds write in Skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6523" }, { "category": "external", "summary": "RHBZ#1857329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857329" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6523", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6523" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6523", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6523" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Out of bounds write in Skia" }, { "cve": "CVE-2020-6524", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857330" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in WebAudio", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6524" }, { "category": "external", "summary": "RHBZ#1857330", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857330" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6524", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6524" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6524", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6524" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Heap buffer overflow in WebAudio" }, { "cve": "CVE-2020-6525", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857331" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in Skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6525" }, { "category": "external", "summary": "RHBZ#1857331", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857331" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6525", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6525" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6525", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6525" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: Heap buffer overflow in Skia" }, { "cve": "CVE-2020-6526", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857332" } ], "notes": [ { "category": "description", "text": "Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Inappropriate implementation in iframe sandbox", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6526" }, { "category": "external", "summary": "RHBZ#1857332", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857332" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6526", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6526" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6526", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6526" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Inappropriate implementation in iframe sandbox" }, { "cve": "CVE-2020-6527", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857333" } ], "notes": [ { "category": "description", "text": "Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Insufficient policy enforcement in CSP", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6527" }, { "category": "external", "summary": "RHBZ#1857333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6527" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Insufficient policy enforcement in CSP" }, { "cve": "CVE-2020-6528", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857334" } ], "notes": [ { "category": "description", "text": "Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Incorrect security UI in basic auth", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6528" }, { "category": "external", "summary": "RHBZ#1857334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857334" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6528", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6528" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6528", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6528" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Incorrect security UI in basic auth" }, { "cve": "CVE-2020-6529", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857336" } ], "notes": [ { "category": "description", "text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Inappropriate implementation in WebRTC", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6529" }, { "category": "external", "summary": "RHBZ#1857336", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857336" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6529", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6529" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6529", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6529" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Inappropriate implementation in WebRTC" }, { "cve": "CVE-2020-6530", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857337" } ], "notes": [ { "category": "description", "text": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Out of bounds memory access in developer tools", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6530" }, { "category": "external", "summary": "RHBZ#1857337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6530", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6530" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6530", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6530" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Out of bounds memory access in developer tools" }, { "cve": "CVE-2020-6531", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857338" } ], "notes": [ { "category": "description", "text": "Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Side-channel information leakage in scroll to text", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6531" }, { "category": "external", "summary": "RHBZ#1857338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6531", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6531" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6531", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6531" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Side-channel information leakage in scroll to text" }, { "cve": "CVE-2020-6532", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861466" } ], "notes": [ { "category": "description", "text": "Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Use after free in SCTP", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6532" }, { "category": "external", "summary": "RHBZ#1861466", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861466" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6532", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6532" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6532", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6532" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Use after free in SCTP" }, { "cve": "CVE-2020-6533", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857339" } ], "notes": [ { "category": "description", "text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Type Confusion in V8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6533" }, { "category": "external", "summary": "RHBZ#1857339", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857339" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6533", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6533" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6533" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Type Confusion in V8" }, { "cve": "CVE-2020-6534", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857340" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in WebRTC", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6534" }, { "category": "external", "summary": "RHBZ#1857340", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857340" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6534", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6534" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6534", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6534" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Heap buffer overflow in WebRTC" }, { "cve": "CVE-2020-6535", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857341" } ], "notes": [ { "category": "description", "text": "Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Insufficient data validation in WebUI", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6535" }, { "category": "external", "summary": "RHBZ#1857341", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857341" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6535", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6535" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6535", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6535" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Insufficient data validation in WebUI" }, { "cve": "CVE-2020-6536", "discovery_date": "2020-07-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1857342" } ], "notes": [ { "category": "description", "text": "Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox (URL bar) via a crafted PWA.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Incorrect security UI in PWAs", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6536" }, { "category": "external", "summary": "RHBZ#1857342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857342" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6536", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6536" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6536", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6536" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html" } ], "release_date": "2020-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: Incorrect security UI in PWAs" }, { "cve": "CVE-2020-6537", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861464" } ], "notes": [ { "category": "description", "text": "Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Type Confusion in V8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6537" }, { "category": "external", "summary": "RHBZ#1861464", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861464" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6537", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6537" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6537", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6537" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Type Confusion in V8" }, { "cve": "CVE-2020-6538", "cwe": { "id": "CWE-358", "name": "Improperly Implemented Security Check for Standard" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861465" } ], "notes": [ { "category": "description", "text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Inappropriate implementation in WebView", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6538" }, { "category": "external", "summary": "RHBZ#1861465", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861465" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6538", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6538" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6538", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6538" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Inappropriate implementation in WebView" }, { "cve": "CVE-2020-6539", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861467" } ], "notes": [ { "category": "description", "text": "Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Use after free in CSS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6539" }, { "category": "external", "summary": "RHBZ#1861467", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861467" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6539", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6539" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6539" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Use after free in CSS" }, { "cve": "CVE-2020-6540", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861468" } ], "notes": [ { "category": "description", "text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Heap buffer overflow in Skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6540" }, { "category": "external", "summary": "RHBZ#1861468", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861468" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6540", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6540" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6540", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6540" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Heap buffer overflow in Skia" }, { "cve": "CVE-2020-6541", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-07-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1861469" } ], "notes": [ { "category": "description", "text": "Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: Use after free in WebUSB", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6541" }, { "category": "external", "summary": "RHBZ#1861469", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1861469" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6541", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6541" }, { "category": "external", "summary": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html", "url": "https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-08-10T06:40:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:3377" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-0:84.0.4147.105-2.el6_10.x86_64", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.i686", "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:84.0.4147.105-2.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: Use after free in WebUSB" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.