Red Hat Security Advisory: chromium-browser security update
🔗 CVE IDs covered (46)
📋 Description
CVE-2019-5870 — chromium-browser: Use-after-free in media CVE-2019-5871 — chromium-browser: Heap overflow in Skia CVE-2019-5872 — chromium-browser: chromium-browser: Use-after-free in Mojo CVE-2019-5874 — chromium-browser: chromium-browser: External URIs may trigger other browsers CVE-2019-5875 — chromium-browser: chromium-browser: URL bar spoof via download redirect CVE-2019-5876 — chromium-browser: Use-after-free in media CVE-2019-5877 — chromium-browser: Out-of-bounds access in V8 CVE-2019-5878 — chromium-browser: Use-after-free in V8 CVE-2019-5879 — chromium-browser: Extensions can read some local files CVE-2019-5880 — chromium-browser: SameSite cookie bypass CVE-2019-5881 — chromium-browser: Arbitrary read in SwiftShader CVE-2019-13659 — chromium-browser: URL spoof CVE-2019-13660 — chromium-browser: Full screen notification overlap CVE-2019-13661 — chromium-browser: Full screen notification spoof CVE-2019-13662 — chromium-browser: CSP bypass CVE-2019-13663 — chromium-browser: IDN spoof CVE-2019-13664 — chromium-browser: CSRF bypass CVE-2019-13665 — chromium-browser: Multiple file download protection bypass CVE-2019-13666 — chromium-browser: Side channel using storage size estimate CVE-2019-13667 — chromium-browser: URI bar spoof when using external app URIs CVE-2019-13668 — chromium-browser: Global window leak via console CVE-2019-13669 — chromium-browser: HTTP authentication spoof CVE-2019-13670 — chromium-browser: V8 memory corruption in regex CVE-2019-13671 — chromium-browser: Dialog box fails to show origin CVE-2019-13673 — chromium-browser: Cross-origin information leak using devtools CVE-2019-13674 — chromium-browser: IDN spoofing CVE-2019-13675 — chromium-browser: Extensions can be disabled by trailing slash CVE-2019-13676 — chromium-browser: Google URI shown for certificate warning CVE-2019-13677 — chromium-browser: Chrome web store origin needs to be isolated CVE-2019-13678 — chromium-browser: Download dialog spoofing CVE-2019-13679 — chromium-browser: User gesture needed for printing CVE-2019-13680 — chromium-browser: IP address spoofing to servers CVE-2019-13681 — chromium-browser: Bypass on download restrictions CVE-2019-13682 — chromium-browser: Site isolation bypass CVE-2019-13683 — chromium-browser: Exceptions leaked by devtools CVE-2019-13685 — chromium-browser: Use-after-free in UI CVE-2019-13686 — chromium-browser: Use-after-free in offline pages CVE-2019-13687 — chromium-browser: Use-after-free in media CVE-2019-13688 — chromium-browser: Use-after-free in media CVE-2019-13691 — chromium-browser: Omnibox spoof CVE-2019-13692 — chromium-browser: SOP bypass CVE-2019-13693 — chromium-browser: Use-after-free in IndexedDB CVE-2019-13694 — chromium-browser: Use-after-free in WebRTC CVE-2019-13695 — chromium-browser: Use-after-free in audio CVE-2019-13696 — chromium-browser: Use-after-free in V8 CVE-2019-13697 — chromium-browser: Cross-origin size leak
🎯 Affected products18
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.
🔗 References (46)
- selfhttps://access.redhat.com/errata/RHSA-2019:3211
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762366
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762367
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762368
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762370
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762371
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762372
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762373
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762374
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762375
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762376
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762377
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762378
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762379
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762380
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762381
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762382
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762383
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762384
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762385
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762386
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762387
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762388
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762389
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762390
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762391
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762392
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762393
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762394
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762395
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762396
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762397
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762398
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762399
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762400
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762401
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762402
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762474
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762476
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762518
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762519
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762520
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762521
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1762522
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3211.json