RHSA-2020_0514

Vulnerability from csaf_redhat - Published: 2020-02-17 09:31 - Updated: 2024-11-15 09:31
Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Important
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 80.0.3987.87. Security Fix(es): * chromium-browser: Integer overflow in JavaScript (CVE-2020-6381) * chromium-browser: Type Confusion in JavaScript (CVE-2020-6382) * chromium-browser: Insufficient policy enforcement in storage (CVE-2020-6385) * chromium-browser: Out of bounds write in WebRTC (CVE-2020-6387) * chromium-browser: Out of bounds memory access in WebAudio (CVE-2020-6388) * chromium-browser: Out of bounds write in WebRTC (CVE-2020-6389) * chromium-browser: Out of bounds memory access in streams (CVE-2020-6390) * libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure (CVE-2019-18197) * sqlite: invalid pointer dereference in exprListAppendList in window.c (CVE-2019-19880) * sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference (CVE-2019-19923) * sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive (CVE-2019-19925) * sqlite: error mishandling because of incomplete fix of CVE-2019-19880 (CVE-2019-19926) * chromium-browser: Insufficient validation of untrusted input in Blink (CVE-2020-6391) * chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-6392) * chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6393) * chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6394) * chromium-browser: Out of bounds read in JavaScript (CVE-2020-6395) * chromium-browser: Inappropriate implementation in Skia (CVE-2020-6396) * chromium-browser: Incorrect security UI in sharing (CVE-2020-6397) * chromium-browser: Uninitialized use in PDFium (CVE-2020-6398) * chromium-browser: Insufficient policy enforcement in AppCache (CVE-2020-6399) * chromium-browser: Inappropriate implementation in CORS (CVE-2020-6400) * chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6401) * chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6402) * chromium-browser: Incorrect security UI in Omnibox (CVE-2020-6403) * chromium-browser: Inappropriate implementation in Blink (CVE-2020-6404) * sqlite: Out-of-bounds read in SELECT with ON/USING clause (CVE-2020-6405) * chromium-browser: Use after free in audio (CVE-2020-6406) * chromium-browser: Insufficient policy enforcement in CORS (CVE-2020-6408) * chromium-browser: Inappropriate implementation in Omnibox (CVE-2020-6409) * chromium-browser: Insufficient policy enforcement in navigation (CVE-2020-6410) * chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6411) * chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6412) * chromium-browser: Inappropriate implementation in Blink (CVE-2020-6413) * chromium-browser: Insufficient policy enforcement in Safe Browsing (CVE-2020-6414) * chromium-browser: Inappropriate implementation in JavaScript (CVE-2020-6415) * chromium-browser: Insufficient data validation in streams (CVE-2020-6416) * chromium-browser: Inappropriate implementation in installer (CVE-2020-6417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-18197

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2019-19925

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 - Improper Input Validation
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6381

Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6382

Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6385

Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6388

Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6389

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6390

Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6391

Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6392

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6393

Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6394

Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6395

Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6396

Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6397

Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6398

Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6399

Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6400

Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6401

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6402

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6403

Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6404

Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6405

An out-of-bounds read vulnerability was found in the SQLite component of the Chromium browser. A remote attacker could abuse this flaw to obtain potentially sensitive information from process memory via a crafted HTML page. The highest threat from this vulnerability is to data confidentiality.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 - Out-of-bounds Read
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6406

Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6408

Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6409

Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6410

Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6411

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6412

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6413

Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6414

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6415

Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6416

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6417

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6499

Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6500

Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6501

Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
CVE-2020-6502

Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2020:0514
References
https://access.redhat.com/errata/RHSA-2020:0514 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1770768 external
https://bugzilla.redhat.com/show_bug.cgi?id=1787032 external
https://bugzilla.redhat.com/show_bug.cgi?id=1788846 external
https://bugzilla.redhat.com/show_bug.cgi?id=1788866 external
https://bugzilla.redhat.com/show_bug.cgi?id=1789364 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801160 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801161 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801162 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801163 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801164 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801165 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801166 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801167 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801168 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801169 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801170 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801171 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801172 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801173 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801174 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801175 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801176 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801177 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801178 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801179 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801180 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801181 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801182 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801184 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801185 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801186 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801187 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801188 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801189 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801190 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801191 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801192 external
https://bugzilla.redhat.com/show_bug.cgi?id=1801193 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-18197 self
https://bugzilla.redhat.com/show_bug.cgi?id=1770768 external
https://www.cve.org/CVERecord?id=CVE-2019-18197 external
https://nvd.nist.gov/vuln/detail/CVE-2019-18197 external
https://access.redhat.com/security/cve/CVE-2019-19880 self
https://bugzilla.redhat.com/show_bug.cgi?id=1787032 external
https://www.cve.org/CVERecord?id=CVE-2019-19880 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19880 external
https://access.redhat.com/security/cve/CVE-2019-19923 self
https://bugzilla.redhat.com/show_bug.cgi?id=1788846 external
https://www.cve.org/CVERecord?id=CVE-2019-19923 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19923 external
https://access.redhat.com/security/cve/CVE-2019-19925 self
https://bugzilla.redhat.com/show_bug.cgi?id=1788866 external
https://www.cve.org/CVERecord?id=CVE-2019-19925 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19925 external
https://access.redhat.com/security/cve/CVE-2019-19926 self
https://bugzilla.redhat.com/show_bug.cgi?id=1789364 external
https://www.cve.org/CVERecord?id=CVE-2019-19926 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19926 external
https://access.redhat.com/security/cve/CVE-2020-6381 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801160 external
https://www.cve.org/CVERecord?id=CVE-2020-6381 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6381 external
https://chromereleases.googleblog.com/2020/02/sta… external
https://access.redhat.com/security/cve/CVE-2020-6382 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801161 external
https://www.cve.org/CVERecord?id=CVE-2020-6382 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6382 external
https://access.redhat.com/security/cve/CVE-2020-6385 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801162 external
https://www.cve.org/CVERecord?id=CVE-2020-6385 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6385 external
https://access.redhat.com/security/cve/CVE-2020-6387 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801163 external
https://www.cve.org/CVERecord?id=CVE-2020-6387 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6387 external
https://access.redhat.com/security/cve/CVE-2020-6388 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801164 external
https://www.cve.org/CVERecord?id=CVE-2020-6388 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6388 external
https://access.redhat.com/security/cve/CVE-2020-6389 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801165 external
https://www.cve.org/CVERecord?id=CVE-2020-6389 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6389 external
https://access.redhat.com/security/cve/CVE-2020-6390 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801166 external
https://www.cve.org/CVERecord?id=CVE-2020-6390 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6390 external
https://access.redhat.com/security/cve/CVE-2020-6391 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801167 external
https://www.cve.org/CVERecord?id=CVE-2020-6391 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6391 external
https://access.redhat.com/security/cve/CVE-2020-6392 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801168 external
https://www.cve.org/CVERecord?id=CVE-2020-6392 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6392 external
https://access.redhat.com/security/cve/CVE-2020-6393 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801169 external
https://www.cve.org/CVERecord?id=CVE-2020-6393 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6393 external
https://access.redhat.com/security/cve/CVE-2020-6394 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801170 external
https://www.cve.org/CVERecord?id=CVE-2020-6394 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6394 external
https://access.redhat.com/security/cve/CVE-2020-6395 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801171 external
https://www.cve.org/CVERecord?id=CVE-2020-6395 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6395 external
https://access.redhat.com/security/cve/CVE-2020-6396 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801172 external
https://www.cve.org/CVERecord?id=CVE-2020-6396 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6396 external
https://access.redhat.com/security/cve/CVE-2020-6397 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801173 external
https://www.cve.org/CVERecord?id=CVE-2020-6397 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6397 external
https://access.redhat.com/security/cve/CVE-2020-6398 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801174 external
https://www.cve.org/CVERecord?id=CVE-2020-6398 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6398 external
https://access.redhat.com/security/cve/CVE-2020-6399 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801175 external
https://www.cve.org/CVERecord?id=CVE-2020-6399 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6399 external
https://access.redhat.com/security/cve/CVE-2020-6400 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801176 external
https://www.cve.org/CVERecord?id=CVE-2020-6400 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6400 external
https://access.redhat.com/security/cve/CVE-2020-6401 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801177 external
https://www.cve.org/CVERecord?id=CVE-2020-6401 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6401 external
https://access.redhat.com/security/cve/CVE-2020-6402 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801178 external
https://www.cve.org/CVERecord?id=CVE-2020-6402 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6402 external
https://access.redhat.com/security/cve/CVE-2020-6403 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801179 external
https://www.cve.org/CVERecord?id=CVE-2020-6403 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6403 external
https://access.redhat.com/security/cve/CVE-2020-6404 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801180 external
https://www.cve.org/CVERecord?id=CVE-2020-6404 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6404 external
https://access.redhat.com/security/cve/CVE-2020-6405 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801181 external
https://www.cve.org/CVERecord?id=CVE-2020-6405 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6405 external
https://access.redhat.com/security/cve/CVE-2020-6406 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801182 external
https://www.cve.org/CVERecord?id=CVE-2020-6406 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6406 external
https://access.redhat.com/security/cve/CVE-2020-6408 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801184 external
https://www.cve.org/CVERecord?id=CVE-2020-6408 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6408 external
https://access.redhat.com/security/cve/CVE-2020-6409 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801185 external
https://www.cve.org/CVERecord?id=CVE-2020-6409 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6409 external
https://access.redhat.com/security/cve/CVE-2020-6410 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801186 external
https://www.cve.org/CVERecord?id=CVE-2020-6410 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6410 external
https://access.redhat.com/security/cve/CVE-2020-6411 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801187 external
https://www.cve.org/CVERecord?id=CVE-2020-6411 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6411 external
https://access.redhat.com/security/cve/CVE-2020-6412 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801188 external
https://www.cve.org/CVERecord?id=CVE-2020-6412 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6412 external
https://access.redhat.com/security/cve/CVE-2020-6413 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801189 external
https://www.cve.org/CVERecord?id=CVE-2020-6413 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6413 external
https://access.redhat.com/security/cve/CVE-2020-6414 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801190 external
https://www.cve.org/CVERecord?id=CVE-2020-6414 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6414 external
https://access.redhat.com/security/cve/CVE-2020-6415 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801191 external
https://www.cve.org/CVERecord?id=CVE-2020-6415 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6415 external
https://access.redhat.com/security/cve/CVE-2020-6416 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801192 external
https://www.cve.org/CVERecord?id=CVE-2020-6416 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6416 external
https://access.redhat.com/security/cve/CVE-2020-6417 self
https://bugzilla.redhat.com/show_bug.cgi?id=1801193 external
https://www.cve.org/CVERecord?id=CVE-2020-6417 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6417 external
https://access.redhat.com/security/cve/CVE-2020-6499 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844539 external
https://www.cve.org/CVERecord?id=CVE-2020-6499 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6499 external
https://access.redhat.com/security/cve/CVE-2020-6500 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844542 external
https://www.cve.org/CVERecord?id=CVE-2020-6500 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6500 external
https://access.redhat.com/security/cve/CVE-2020-6501 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844546 external
https://www.cve.org/CVERecord?id=CVE-2020-6501 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6501 external
https://access.redhat.com/security/cve/CVE-2020-6502 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844549 external
https://www.cve.org/CVERecord?id=CVE-2020-6502 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6502 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 80.0.3987.87.\n\nSecurity Fix(es):\n\n* chromium-browser: Integer overflow in JavaScript (CVE-2020-6381)\n\n* chromium-browser: Type Confusion in JavaScript (CVE-2020-6382)\n\n* chromium-browser: Insufficient policy enforcement in storage (CVE-2020-6385)\n\n* chromium-browser: Out of bounds write in WebRTC (CVE-2020-6387)\n\n* chromium-browser: Out of bounds memory access in WebAudio (CVE-2020-6388)\n\n* chromium-browser: Out of bounds write in WebRTC (CVE-2020-6389)\n\n* chromium-browser: Out of bounds memory access in streams (CVE-2020-6390)\n\n* libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure (CVE-2019-18197)\n\n* sqlite: invalid pointer dereference in exprListAppendList in window.c (CVE-2019-19880)\n\n* sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference (CVE-2019-19923)\n\n* sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive (CVE-2019-19925)\n\n* sqlite: error mishandling because of incomplete fix of CVE-2019-19880 (CVE-2019-19926)\n\n* chromium-browser: Insufficient validation of untrusted input in Blink (CVE-2020-6391)\n\n* chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-6392)\n\n* chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6393)\n\n* chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6394)\n\n* chromium-browser: Out of bounds read in JavaScript (CVE-2020-6395)\n\n* chromium-browser: Inappropriate implementation in Skia (CVE-2020-6396)\n\n* chromium-browser: Incorrect security UI in sharing (CVE-2020-6397)\n\n* chromium-browser: Uninitialized use in PDFium (CVE-2020-6398)\n\n* chromium-browser: Insufficient policy enforcement in AppCache (CVE-2020-6399)\n\n* chromium-browser: Inappropriate implementation in CORS (CVE-2020-6400)\n\n* chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6401)\n\n* chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6402)\n\n* chromium-browser: Incorrect security UI in Omnibox (CVE-2020-6403)\n\n* chromium-browser: Inappropriate implementation in Blink (CVE-2020-6404)\n\n* sqlite: Out-of-bounds read in SELECT with ON/USING clause (CVE-2020-6405)\n\n* chromium-browser: Use after free in audio (CVE-2020-6406)\n\n* chromium-browser: Insufficient policy enforcement in CORS (CVE-2020-6408)\n\n* chromium-browser: Inappropriate implementation in Omnibox (CVE-2020-6409)\n\n* chromium-browser: Insufficient policy enforcement in navigation (CVE-2020-6410)\n\n* chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6411)\n\n* chromium-browser: Insufficient validation of untrusted input in Omnibox (CVE-2020-6412)\n\n* chromium-browser: Inappropriate implementation in Blink (CVE-2020-6413)\n\n* chromium-browser: Insufficient policy enforcement in Safe Browsing (CVE-2020-6414)\n\n* chromium-browser: Inappropriate implementation in JavaScript (CVE-2020-6415)\n\n* chromium-browser: Insufficient data validation in streams (CVE-2020-6416)\n\n* chromium-browser: Inappropriate implementation in installer (CVE-2020-6417)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:0514",
        "url": "https://access.redhat.com/errata/RHSA-2020:0514"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1770768",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1770768"
      },
      {
        "category": "external",
        "summary": "1787032",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1787032"
      },
      {
        "category": "external",
        "summary": "1788846",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788846"
      },
      {
        "category": "external",
        "summary": "1788866",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788866"
      },
      {
        "category": "external",
        "summary": "1789364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1789364"
      },
      {
        "category": "external",
        "summary": "1801160",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801160"
      },
      {
        "category": "external",
        "summary": "1801161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801161"
      },
      {
        "category": "external",
        "summary": "1801162",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801162"
      },
      {
        "category": "external",
        "summary": "1801163",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801163"
      },
      {
        "category": "external",
        "summary": "1801164",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801164"
      },
      {
        "category": "external",
        "summary": "1801165",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801165"
      },
      {
        "category": "external",
        "summary": "1801166",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801166"
      },
      {
        "category": "external",
        "summary": "1801167",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801167"
      },
      {
        "category": "external",
        "summary": "1801168",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801168"
      },
      {
        "category": "external",
        "summary": "1801169",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801169"
      },
      {
        "category": "external",
        "summary": "1801170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801170"
      },
      {
        "category": "external",
        "summary": "1801171",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801171"
      },
      {
        "category": "external",
        "summary": "1801172",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801172"
      },
      {
        "category": "external",
        "summary": "1801173",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801173"
      },
      {
        "category": "external",
        "summary": "1801174",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801174"
      },
      {
        "category": "external",
        "summary": "1801175",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801175"
      },
      {
        "category": "external",
        "summary": "1801176",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801176"
      },
      {
        "category": "external",
        "summary": "1801177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801177"
      },
      {
        "category": "external",
        "summary": "1801178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801178"
      },
      {
        "category": "external",
        "summary": "1801179",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801179"
      },
      {
        "category": "external",
        "summary": "1801180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801180"
      },
      {
        "category": "external",
        "summary": "1801181",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801181"
      },
      {
        "category": "external",
        "summary": "1801182",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801182"
      },
      {
        "category": "external",
        "summary": "1801184",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801184"
      },
      {
        "category": "external",
        "summary": "1801185",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801185"
      },
      {
        "category": "external",
        "summary": "1801186",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801186"
      },
      {
        "category": "external",
        "summary": "1801187",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801187"
      },
      {
        "category": "external",
        "summary": "1801188",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801188"
      },
      {
        "category": "external",
        "summary": "1801189",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801189"
      },
      {
        "category": "external",
        "summary": "1801190",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801190"
      },
      {
        "category": "external",
        "summary": "1801191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801191"
      },
      {
        "category": "external",
        "summary": "1801192",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801192"
      },
      {
        "category": "external",
        "summary": "1801193",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801193"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0514.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-15T09:31:24+00:00",
      "generator": {
        "date": "2024-11-15T09:31:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2020:0514",
      "initial_release_date": "2020-02-17T09:31:11+00:00",
      "revision_history": [
        {
          "date": "2020-02-17T09:31:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-02-17T09:31:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T09:31:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
                  "product_id": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@80.0.3987.87-1.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
                  "product_id": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@80.0.3987.87-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
                  "product_id": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@80.0.3987.87-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@80.0.3987.87-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18197",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-10-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1770768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack consumes fixes from the base Red Hat Enterprise Linux Operating System. Therefore the libxslt package provided by Red Hat OpenStack has been marked as \u0027will not fix\u0027.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-18197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1770768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1770768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-18197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-18197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-18197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18197"
        }
      ],
      "release_date": "2019-10-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure"
    },
    {
      "cve": "CVE-2019-19880",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2019-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1787032"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sqlite: invalid pointer dereference in exprListAppendList in window.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-19880"
        },
        {
          "category": "external",
          "summary": "RHBZ#1787032",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1787032"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19880",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-19880"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19880",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19880"
        }
      ],
      "release_date": "2019-12-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sqlite: invalid pointer dereference in exprListAppendList in window.c"
    },
    {
      "cve": "CVE-2019-19923",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2020-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1788846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-19923"
        },
        {
          "category": "external",
          "summary": "RHBZ#1788846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-19923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19923"
        }
      ],
      "release_date": "2020-01-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference"
    },
    {
      "cve": "CVE-2019-19925",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2020-01-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1788866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The zip extension was introduced in sqlite-3.22.0, therefore previous versions are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-19925"
        },
        {
          "category": "external",
          "summary": "RHBZ#1788866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19925",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-19925"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19925",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19925"
        }
      ],
      "release_date": "2020-01-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive"
    },
    {
      "cve": "CVE-2019-19926",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2019-12-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1789364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sqlite: error mishandling because of incomplete fix of CVE-2019-19880",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists because of an incomplete fix for CVE-2019-19880.  Currently Red Hat Products shipping sqlite have not fixed CVE-2019-19880 and therefore are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-19926"
        },
        {
          "category": "external",
          "summary": "RHBZ#1789364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1789364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19926",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-19926"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19926",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19926"
        }
      ],
      "release_date": "2019-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sqlite: error mishandling because of incomplete fix of CVE-2019-19880"
    },
    {
      "cve": "CVE-2020-6381",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801160"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in JavaScript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6381"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801160",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801160"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6381",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6381"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6381",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6381"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Integer overflow in JavaScript"
    },
    {
      "cve": "CVE-2020-6382",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801161"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Type Confusion in JavaScript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6382"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801161",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801161"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6382",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6382"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6382",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6382"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Type Confusion in JavaScript"
    },
    {
      "cve": "CVE-2020-6385",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in storage",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6385"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6385"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in storage"
    },
    {
      "cve": "CVE-2020-6387",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801163"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds write in WebRTC",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6387"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801163",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801163"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6387",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6387"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6387",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6387"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Out of bounds write in WebRTC"
    },
    {
      "cve": "CVE-2020-6388",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds memory access in WebAudio",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6388"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6388",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6388"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6388",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6388"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Out of bounds memory access in WebAudio"
    },
    {
      "cve": "CVE-2020-6389",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801165"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds write in WebRTC",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6389"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801165",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801165"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6389",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6389"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6389",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6389"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Out of bounds write in WebRTC"
    },
    {
      "cve": "CVE-2020-6390",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds memory access in streams",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6390"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6390",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6390"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6390",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6390"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Out of bounds memory access in streams"
    },
    {
      "cve": "CVE-2020-6391",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient validation of untrusted input in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6391"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6391",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6391"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6391",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6391"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient validation of untrusted input in Blink"
    },
    {
      "cve": "CVE-2020-6392",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in extensions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6392"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6392",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6392"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6392",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6392"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in extensions"
    },
    {
      "cve": "CVE-2020-6393",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801169"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801169",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801169"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6393"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in Blink"
    },
    {
      "cve": "CVE-2020-6394",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801170"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6394"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801170",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801170"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6394"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in Blink"
    },
    {
      "cve": "CVE-2020-6395",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801171"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds read in JavaScript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6395"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801171",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801171"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6395",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6395"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6395",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6395"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Out of bounds read in JavaScript"
    },
    {
      "cve": "CVE-2020-6396",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801172"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6396"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801172",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801172"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6396",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6396"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6396",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6396"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in Skia"
    },
    {
      "cve": "CVE-2020-6397",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801173"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Incorrect security UI in sharing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6397"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801173",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801173"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6397",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6397"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6397",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6397"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Incorrect security UI in sharing"
    },
    {
      "cve": "CVE-2020-6398",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801174"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Uninitialized use in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6398"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801174",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801174"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6398",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6398"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6398",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6398"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Uninitialized use in PDFium"
    },
    {
      "cve": "CVE-2020-6399",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in AppCache",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6399"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6399",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6399"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6399",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6399"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in AppCache"
    },
    {
      "cve": "CVE-2020-6400",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801176"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in CORS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6400"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801176",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801176"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6400",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6400"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6400",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6400"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in CORS"
    },
    {
      "cve": "CVE-2020-6401",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient validation of untrusted input in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6401"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6401",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6401"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6401",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6401"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox"
    },
    {
      "cve": "CVE-2020-6402",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in downloads",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6402"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6402",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6402"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6402",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6402"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in downloads"
    },
    {
      "cve": "CVE-2020-6403",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801179"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Incorrect security UI in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6403"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801179",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801179"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6403",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6403"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6403",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6403"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Incorrect security UI in Omnibox"
    },
    {
      "cve": "CVE-2020-6404",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801180"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6404"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801180",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801180"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6404",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6404"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6404",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6404"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in Blink"
    },
    {
      "cve": "CVE-2020-6405",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801181"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability was found in the SQLite component of the Chromium browser. A remote attacker could abuse this flaw to obtain potentially sensitive information from process memory via a crafted HTML page. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sqlite: Out-of-bounds read in SELECT with ON/USING clause",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw did not affect the versions of SQLite as shipped with Red Hat Enterprise Linux 5, 6 and 7 as they did not include the WHERE-clause constant propagation optimization, which was introduced in a later version of the package.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6405"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801181",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801181"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6405",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6405"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6405",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6405"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sqlite: Out-of-bounds read in SELECT with ON/USING clause"
    },
    {
      "cve": "CVE-2020-6406",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in audio",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6406"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6406",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6406"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6406",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6406"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Use after free in audio"
    },
    {
      "cve": "CVE-2020-6408",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801184"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in CORS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6408"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801184",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801184"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6408",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6408"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6408",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6408"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in CORS"
    },
    {
      "cve": "CVE-2020-6409",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801185"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6409"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801185",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801185"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6409",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6409"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6409",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6409"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in Omnibox"
    },
    {
      "cve": "CVE-2020-6410",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801186"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in navigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6410"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801186",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801186"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6410"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in navigation"
    },
    {
      "cve": "CVE-2020-6411",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801187"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient validation of untrusted input in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6411"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801187",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801187"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6411",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6411"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6411",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6411"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox"
    },
    {
      "cve": "CVE-2020-6412",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801188"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient validation of untrusted input in Omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6412"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801188",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801188"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6412"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox"
    },
    {
      "cve": "CVE-2020-6413",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801189"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6413"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801189",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801189"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6413",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6413"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6413",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6413"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in Blink"
    },
    {
      "cve": "CVE-2020-6414",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801190"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in Safe Browsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6414"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801190",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801190"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6414",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6414"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6414",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6414"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in Safe Browsing"
    },
    {
      "cve": "CVE-2020-6415",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801191"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in JavaScript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6415"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801191",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801191"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6415",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6415"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6415",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6415"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in JavaScript"
    },
    {
      "cve": "CVE-2020-6416",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801192"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient data validation in streams",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6416"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801192",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801192"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6416",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6416"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6416",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6416"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient data validation in streams"
    },
    {
      "cve": "CVE-2020-6417",
      "discovery_date": "2020-02-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1801193"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in installer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6417"
        },
        {
          "category": "external",
          "summary": "RHBZ#1801193",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801193"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6417",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6417"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6417",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6417"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in installer"
    },
    {
      "cve": "CVE-2020-6499",
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844539"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in AppCache",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6499"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844539",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844539"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6499"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in AppCache"
    },
    {
      "cve": "CVE-2020-6500",
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844542"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in interstitials",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6500"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844542",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844542"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6500",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6500"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6500",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6500"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in interstitials"
    },
    {
      "cve": "CVE-2020-6501",
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844546"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in CSP",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6501"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844546",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844546"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6501",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6501"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6501",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6501"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in CSP"
    },
    {
      "cve": "CVE-2020-6502",
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844549"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Incorrect security UI in permissions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6502"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844549",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844549"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6502"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2020-02-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-02-17T09:31:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:80.0.3987.87-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Incorrect security UI in permissions"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.