Bug 1844558 (CVE-2020-6497) - CVE-2020-6497 chromium-browser: Insufficient policy enforcement in Omnibox
Summary: CVE-2020-6497 chromium-browser: Insufficient policy enforcement in Omnibox
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2020-6497
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 1844564
TreeView+ depends on / blocked
 
Reported: 2020-06-05 16:46 UTC by msiddiqu
Modified: 2021-02-16 19:55 UTC (History)
4 users (show)

Fixed In Version: chromium-browser 83.0.4103.97
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-06-05 20:25:29 UTC
Embargoed:

Attachments (Terms of Use)

Description msiddiqu 2020-06-05 16:46:46 UTC 
An insufficient policy enforcement flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=1069246

External References:

https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html
Comment 1 msiddiqu 2020-06-05 16:49:04 UTC 
Created chromium tracking bugs for this issue:

Affects: epel-all [bug 1844563]
Affects: fedora-all [bug 1844562]
Comment 3 Tomas Hoger 2020-06-05 20:25:29 UTC 
The upstream Chrome release announcement indicates that this issue was only applied to Chrome for IOS release (83.0.4103.88).  Considering not affected on all other platforms.
Note You need to log in before you can comment on or make changes to this bug.