GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2020_4235

Vulnerability from csaf_redhat - Published: 2020-10-13 08:22 - Updated: 2024-11-15 09:37
Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Critical
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 86.0.4240.75. Security Fix(es): * chromium-browser: Use after free in payments (CVE-2020-15967) * chromium-browser: Use after free in Blink (CVE-2020-15968) * chromium-browser: Use after free in WebRTC (CVE-2020-15969) * chromium-browser: Use after free in NFC (CVE-2020-15970) * chromium-browser: Use after free in printing (CVE-2020-15971) * chromium-browser: Use after free in audio (CVE-2020-15972) * chromium-browser: Use after free in autofill (CVE-2020-15990) * chromium-browser: Use after free in password manager (CVE-2020-15991) * chromium-browser: Inappropriate implementation in networking (CVE-2020-6557) * chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-15973) * chromium-browser: Integer overflow in Blink (CVE-2020-15974) * chromium-browser: Integer overflow in SwiftShader (CVE-2020-15975) * chromium-browser: Use after free in WebXR (CVE-2020-15976) * chromium-browser: Insufficient data validation in dialogs (CVE-2020-15977) * chromium-browser: Insufficient data validation in navigation (CVE-2020-15978) * chromium-browser: Inappropriate implementation in V8 (CVE-2020-15979) * chromium-browser: Insufficient policy enforcement in Intents (CVE-2020-15980) * chromium-browser: Out of bounds read in audio (CVE-2020-15981) * chromium-browser: Side-channel information leakage in cache (CVE-2020-15982) * chromium-browser: Insufficient data validation in webUI (CVE-2020-15983) * chromium-browser: Insufficient policy enforcement in Omnibox (CVE-2020-15984) * chromium-browser: Inappropriate implementation in Blink (CVE-2020-15985) * chromium-browser: Integer overflow in media (CVE-2020-15986) * chromium-browser: Use after free in WebRTC (CVE-2020-15987) * chromium-browser: Insufficient policy enforcement in networking (CVE-2020-15992) * chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-15988) * chromium-browser: Uninitialized use in PDFium (CVE-2020-15989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2020-6557

Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 —
Vendor Fix fix
Threats
Impact Moderate
CVE-2020-15967

Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Critical
CVE-2020-15968

Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15969

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15970

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15971

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15972

Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15973

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15974

Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15975

Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15976

Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15977

Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15978

Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15979

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15980

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15981

Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15982

Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15983

Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15984

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15985

Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15986

Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15987

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
CVE-2020-15988

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Low
CVE-2020-15989

Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Low
CVE-2020-15990

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15991

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Important
CVE-2020-15992

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 16 products, the same list as for CVE-2020-6557
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2020:4235 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1885883 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885884 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885885 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885886 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885887 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885888 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885889 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885890 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885891 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885892 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885893 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885894 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885896 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885897 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885899 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885901 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885902 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885903 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885904 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885905 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885906 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885907 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885908 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885909 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885910 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885911 external
https://bugzilla.redhat.com/show_bug.cgi?id=1885912 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2020-6557 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885896 external
https://www.cve.org/CVERecord?id=CVE-2020-6557 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6557 external
https://chromereleases.googleblog.com/2020/10/sta… external
https://access.redhat.com/security/cve/CVE-2020-15967 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885883 external
https://www.cve.org/CVERecord?id=CVE-2020-15967 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15967 external
https://access.redhat.com/security/cve/CVE-2020-15968 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885884 external
https://www.cve.org/CVERecord?id=CVE-2020-15968 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15968 external
https://access.redhat.com/security/cve/CVE-2020-15969 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885885 external
https://www.cve.org/CVERecord?id=CVE-2020-15969 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15969 external
https://access.redhat.com/security/cve/CVE-2020-15970 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885886 external
https://www.cve.org/CVERecord?id=CVE-2020-15970 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15970 external
https://access.redhat.com/security/cve/CVE-2020-15971 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885887 external
https://www.cve.org/CVERecord?id=CVE-2020-15971 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15971 external
https://access.redhat.com/security/cve/CVE-2020-15972 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885888 external
https://www.cve.org/CVERecord?id=CVE-2020-15972 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15972 external
https://access.redhat.com/security/cve/CVE-2020-15973 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885891 external
https://www.cve.org/CVERecord?id=CVE-2020-15973 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15973 external
https://access.redhat.com/security/cve/CVE-2020-15974 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885892 external
https://www.cve.org/CVERecord?id=CVE-2020-15974 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15974 external
https://access.redhat.com/security/cve/CVE-2020-15975 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885893 external
https://www.cve.org/CVERecord?id=CVE-2020-15975 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15975 external
https://access.redhat.com/security/cve/CVE-2020-15976 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885894 external
https://www.cve.org/CVERecord?id=CVE-2020-15976 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15976 external
https://access.redhat.com/security/cve/CVE-2020-15977 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885897 external
https://www.cve.org/CVERecord?id=CVE-2020-15977 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15977 external
https://access.redhat.com/security/cve/CVE-2020-15978 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885899 external
https://www.cve.org/CVERecord?id=CVE-2020-15978 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15978 external
https://access.redhat.com/security/cve/CVE-2020-15979 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885901 external
https://www.cve.org/CVERecord?id=CVE-2020-15979 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15979 external
https://access.redhat.com/security/cve/CVE-2020-15980 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885902 external
https://www.cve.org/CVERecord?id=CVE-2020-15980 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15980 external
https://access.redhat.com/security/cve/CVE-2020-15981 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885903 external
https://www.cve.org/CVERecord?id=CVE-2020-15981 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15981 external
https://access.redhat.com/security/cve/CVE-2020-15982 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885904 external
https://www.cve.org/CVERecord?id=CVE-2020-15982 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15982 external
https://access.redhat.com/security/cve/CVE-2020-15983 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885905 external
https://www.cve.org/CVERecord?id=CVE-2020-15983 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15983 external
https://access.redhat.com/security/cve/CVE-2020-15984 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885906 external
https://www.cve.org/CVERecord?id=CVE-2020-15984 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15984 external
https://access.redhat.com/security/cve/CVE-2020-15985 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885907 external
https://www.cve.org/CVERecord?id=CVE-2020-15985 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15985 external
https://access.redhat.com/security/cve/CVE-2020-15986 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885908 external
https://www.cve.org/CVERecord?id=CVE-2020-15986 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15986 external
https://access.redhat.com/security/cve/CVE-2020-15987 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885909 external
https://www.cve.org/CVERecord?id=CVE-2020-15987 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15987 external
https://access.redhat.com/security/cve/CVE-2020-15988 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885911 external
https://www.cve.org/CVERecord?id=CVE-2020-15988 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15988 external
https://access.redhat.com/security/cve/CVE-2020-15989 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885912 external
https://www.cve.org/CVERecord?id=CVE-2020-15989 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15989 external
https://access.redhat.com/security/cve/CVE-2020-15990 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885889 external
https://www.cve.org/CVERecord?id=CVE-2020-15990 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15990 external
https://access.redhat.com/security/cve/CVE-2020-15991 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885890 external
https://www.cve.org/CVERecord?id=CVE-2020-15991 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15991 external
https://access.redhat.com/security/cve/CVE-2020-15992 self
https://bugzilla.redhat.com/show_bug.cgi?id=1885910 external
https://www.cve.org/CVERecord?id=CVE-2020-15992 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15992 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 86.0.4240.75.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in payments (CVE-2020-15967)\n\n* chromium-browser: Use after free in Blink (CVE-2020-15968)\n\n* chromium-browser: Use after free in WebRTC (CVE-2020-15969)\n\n* chromium-browser: Use after free in NFC (CVE-2020-15970)\n\n* chromium-browser: Use after free in printing (CVE-2020-15971)\n\n* chromium-browser: Use after free in audio (CVE-2020-15972)\n\n* chromium-browser: Use after free in autofill (CVE-2020-15990)\n\n* chromium-browser: Use after free in password manager (CVE-2020-15991)\n\n* chromium-browser: Inappropriate implementation in networking (CVE-2020-6557)\n\n* chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-15973)\n\n* chromium-browser: Integer overflow in Blink (CVE-2020-15974)\n\n* chromium-browser: Integer overflow in SwiftShader (CVE-2020-15975)\n\n* chromium-browser: Use after free in WebXR (CVE-2020-15976)\n\n* chromium-browser: Insufficient data validation in dialogs (CVE-2020-15977)\n\n* chromium-browser: Insufficient data validation in navigation (CVE-2020-15978)\n\n* chromium-browser: Inappropriate implementation in V8 (CVE-2020-15979)\n\n* chromium-browser: Insufficient policy enforcement in Intents (CVE-2020-15980)\n\n* chromium-browser: Out of bounds read in audio (CVE-2020-15981)\n\n* chromium-browser: Side-channel information leakage in cache (CVE-2020-15982)\n\n* chromium-browser: Insufficient data validation in webUI (CVE-2020-15983)\n\n* chromium-browser: Insufficient policy enforcement in Omnibox (CVE-2020-15984)\n\n* chromium-browser: Inappropriate implementation in Blink (CVE-2020-15985)\n\n* chromium-browser: Integer overflow in media (CVE-2020-15986)\n\n* chromium-browser: Use after free in WebRTC (CVE-2020-15987)\n\n* chromium-browser: Insufficient policy enforcement in networking (CVE-2020-15992)\n\n* chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-15988)\n\n* chromium-browser: Uninitialized use in PDFium (CVE-2020-15989)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:4235",
        "url": "https://access.redhat.com/errata/RHSA-2020:4235"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "1885883",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885883"
      },
      {
        "category": "external",
        "summary": "1885884",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885884"
      },
      {
        "category": "external",
        "summary": "1885885",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885885"
      },
      {
        "category": "external",
        "summary": "1885886",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885886"
      },
      {
        "category": "external",
        "summary": "1885887",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885887"
      },
      {
        "category": "external",
        "summary": "1885888",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885888"
      },
      {
        "category": "external",
        "summary": "1885889",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885889"
      },
      {
        "category": "external",
        "summary": "1885890",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885890"
      },
      {
        "category": "external",
        "summary": "1885891",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885891"
      },
      {
        "category": "external",
        "summary": "1885892",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885892"
      },
      {
        "category": "external",
        "summary": "1885893",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885893"
      },
      {
        "category": "external",
        "summary": "1885894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885894"
      },
      {
        "category": "external",
        "summary": "1885896",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885896"
      },
      {
        "category": "external",
        "summary": "1885897",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885897"
      },
      {
        "category": "external",
        "summary": "1885899",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885899"
      },
      {
        "category": "external",
        "summary": "1885901",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885901"
      },
      {
        "category": "external",
        "summary": "1885902",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885902"
      },
      {
        "category": "external",
        "summary": "1885903",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885903"
      },
      {
        "category": "external",
        "summary": "1885904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885904"
      },
      {
        "category": "external",
        "summary": "1885905",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885905"
      },
      {
        "category": "external",
        "summary": "1885906",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885906"
      },
      {
        "category": "external",
        "summary": "1885907",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885907"
      },
      {
        "category": "external",
        "summary": "1885908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885908"
      },
      {
        "category": "external",
        "summary": "1885909",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885909"
      },
      {
        "category": "external",
        "summary": "1885910",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885910"
      },
      {
        "category": "external",
        "summary": "1885911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885911"
      },
      {
        "category": "external",
        "summary": "1885912",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885912"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4235.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-15T09:37:30+00:00",
      "generator": {
        "date": "2024-11-15T09:37:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2020:4235",
      "initial_release_date": "2020-10-13T08:22:05+00:00",
      "revision_history": [
        {
          "date": "2020-10-13T08:22:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-10-13T08:22:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T09:37:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
                  "product_id": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@86.0.4240.75-1.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
                  "product_id": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@86.0.4240.75-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
                  "product_id": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@86.0.4240.75-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@86.0.4240.75-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-6557",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885896"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in networking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6557"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885896",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885896"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6557",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6557"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6557",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6557"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in networking"
    },
    {
      "cve": "CVE-2020-15967",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885883"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in payments",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15967"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885883",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885883"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15967",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15967"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15967",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15967"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "chromium-browser: Use after free in payments"
    },
    {
      "cve": "CVE-2020-15968",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885884"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15968"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885884",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885884"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15968",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15968"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15968",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15968"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in Blink"
    },
    {
      "cve": "CVE-2020-15969",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885885"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in WebRTC",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15969"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885885",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885885"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15969"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in WebRTC"
    },
    {
      "cve": "CVE-2020-15970",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885886"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in NFC",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15970"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885886",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885886"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15970",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15970"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15970",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15970"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in NFC"
    },
    {
      "cve": "CVE-2020-15971",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885887"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in printing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15971"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885887",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885887"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15971",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15971"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15971",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15971"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in printing"
    },
    {
      "cve": "CVE-2020-15972",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885888"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in audio",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15972"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885888",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885888"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15972",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15972"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15972",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15972"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in audio"
    },
    {
      "cve": "CVE-2020-15973",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885891"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in extensions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15973"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885891",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885891"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15973",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15973"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15973",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15973"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in extensions"
    },
    {
      "cve": "CVE-2020-15974",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885892"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15974"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885892",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885892"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15974",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15974"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15974",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15974"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Integer overflow in Blink"
    },
    {
      "cve": "CVE-2020-15975",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885893"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in SwiftShader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15975"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885893",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885893"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15975"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Integer overflow in SwiftShader"
    },
    {
      "cve": "CVE-2020-15976",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in WebXR",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15976"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15976",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15976"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15976",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15976"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Use after free in WebXR"
    },
    {
      "cve": "CVE-2020-15977",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885897"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient data validation in dialogs",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15977"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885897",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885897"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15977",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15977"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15977",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15977"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient data validation in dialogs"
    },
    {
      "cve": "CVE-2020-15978",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885899"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient data validation in navigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15978"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885899",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885899"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15978",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15978"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15978",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15978"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient data validation in navigation"
    },
    {
      "cve": "CVE-2020-15979",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in V8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15979"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15979"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in V8"
    },
    {
      "cve": "CVE-2020-15980",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in Intents",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15980"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885902"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15980",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15980"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15980",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15980"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in Intents"
    },
    {
      "cve": "CVE-2020-15981",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885903"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds read in audio",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15981"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885903",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885903"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15981",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15981"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15981",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15981"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Out of bounds read in audio"
    },
    {
      "cve": "CVE-2020-15982",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885904"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Side-channel information leakage in cache",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15982"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885904",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885904"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15982"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Side-channel information leakage in cache"
    },
    {
      "cve": "CVE-2020-15983",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885905"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient data validation in webUI",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15983"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885905",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885905"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15983",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15983"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15983",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15983"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient data validation in webUI"
    },
    {
      "cve": "CVE-2020-15984",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885906"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15984"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885906",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885906"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15984",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15984"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15984",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15984"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in Omnibox"
    },
    {
      "cve": "CVE-2020-15985",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885907"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15985"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885907",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885907"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15985",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15985"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15985",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15985"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in Blink"
    },
    {
      "cve": "CVE-2020-15986",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885908"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in media",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15986"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885908",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885908"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15986"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Integer overflow in media"
    },
    {
      "cve": "CVE-2020-15987",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885909"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in WebRTC",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15987"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885909",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885909"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15987"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Use after free in WebRTC"
    },
    {
      "cve": "CVE-2020-15988",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in downloads",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15988"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15988",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15988"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15988",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15988"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in downloads"
    },
    {
      "cve": "CVE-2020-15989",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885912"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Uninitialized use in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15989"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885912",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885912"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15989",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15989"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15989",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15989"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Uninitialized use in PDFium"
    },
    {
      "cve": "CVE-2020-15990",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885889"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in autofill",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15990"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885889",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885889"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15990",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15990"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15990",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15990"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in autofill"
    },
    {
      "cve": "CVE-2020-15991",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885890"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in password manager",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15991"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885890",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885890"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15991",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15991"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15991",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15991"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in password manager"
    },
    {
      "cve": "CVE-2020-15992",
      "discovery_date": "2020-10-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1885910"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in networking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15992"
        },
        {
          "category": "external",
          "summary": "RHBZ#1885910",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1885910"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15992",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15992"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15992",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15992"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-13T08:22:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4235"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:86.0.4240.75-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:86.0.4240.75-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in networking"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.