Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (29)
📋 Description
CVE-2019-5754 — chromium-browser: Inappropriate implementation in QUIC Networking CVE-2019-5755 — chromium-browser: Inappropriate implementation in V8 CVE-2019-5756 — chromium-browser: Use after free in PDFium CVE-2019-5757 — chromium-browser: Type Confusion in SVG CVE-2019-5758 — chromium-browser: Use after free in Blink CVE-2019-5759 — chromium-browser: Use after free in HTML select elements CVE-2019-5760 — chromium-browser: Use after free in WebRTC CVE-2019-5761 — chromium-browser: Use after free in SwiftShader CVE-2019-5762 — chromium-browser: Use after free in PDFium CVE-2019-5763 — chromium-browser: Insufficient validation of untrusted input in V8 CVE-2019-5764 — chromium-browser: Use after free in WebRTC CVE-2019-5765 — chromium-browser: Insufficient policy enforcement in the browser CVE-2019-5766 — chromium-browser: Insufficient policy enforcement in Canvas CVE-2019-5767 — chromium-browser: Incorrect security UI in WebAPKs CVE-2019-5768 — chromium-browser: Insufficient policy enforcement in DevTools CVE-2019-5769 — chromium-browser: Insufficient validation of untrusted input in Blink CVE-2019-5770 — chromium-browser: Heap buffer overflow in WebGL CVE-2019-5771 — chromium-browser: Heap buffer overflow in SwiftShader CVE-2019-5772 — chromium-browser: Use after free in PDFium CVE-2019-5773 — chromium-browser: Insufficient data validation in IndexedDB CVE-2019-5774 — chromium-browser: Insufficient validation of untrusted input in SafeBrowsing CVE-2019-5775 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5776 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5777 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5778 — chromium-browser: Insufficient policy enforcement in Extensions CVE-2019-5779 — chromium-browser: Insufficient policy enforcement in ServiceWorker CVE-2019-5780 — chromium-browser: Insufficient policy enforcement CVE-2019-5781 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5782 — chromium-browser: Inappropriate implementation in V8
🎯 Affected products15
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (32)
- selfhttps://access.redhat.com/errata/RHSA-2019:0309
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670737
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670738
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670739
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670740
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670741
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670742
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670743
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670744
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670745
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670746
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670747
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670748
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670749
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670750
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670751
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670752
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670753
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670754
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670755
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670756
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670757
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670758
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670759
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670760
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670761
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670762
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670763
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670764
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1670771
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0309.json