Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (12)
📋 Description
CVE-2019-5828 — chromium-browser: Use after free in ServiceWorker CVE-2019-5829 — chromium-browser: Use after free in Download Manager CVE-2019-5830 — chromium-browser: Incorrectly credentialed requests in CORS CVE-2019-5831 — chromium-browser: Incorrect map processing in V8 CVE-2019-5832 — chromium-browser: Incorrect CORS handling in XHR CVE-2019-5833 — chromium-browser: Inconsistent security UI placement CVE-2019-5835 — chromium-browser: Out of bounds read in Swiftshader CVE-2019-5836 — chromium-browser: Heap buffer overflow in Angle CVE-2019-5837 — chromium-browser: Cross-origin resources size disclosure in Appcache CVE-2019-5838 — chromium-browser: Overly permissive tab access in Extensions CVE-2019-5839 — chromium-browser: Incorrect handling of certain code points in Blink CVE-2019-5840 — chromium-browser: Popup blocker bypass
🎯 Affected products18
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:75.0.3770.80-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2019:1477
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718256
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718257
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718258
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718259
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718260
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718261
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718263
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718264
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718266
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718267
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718268
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1718269
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1477.json