RHSA-2019:3759HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
November 6, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (20)

CVE-2019-13700 →CVE-2019-13701 →CVE-2019-13702 →CVE-2019-13705 →CVE-2019-13707 →CVE-2019-13717 →CVE-2019-13699 →CVE-2019-13713 →CVE-2019-13703 →CVE-2019-13708 →CVE-2019-13709 →CVE-2019-13710 →CVE-2019-13714 →CVE-2019-13715 →CVE-2019-13716 →CVE-2019-13718 →CVE-2019-13704 →CVE-2019-13706 →CVE-2019-13711 →CVE-2019-13719 →

📋 Description

CVE-2019-13699 — chromium-browser: Use-after-free in media CVE-2019-13700 — chromium-browser: Buffer overrun in Blink CVE-2019-13701 — chromium-browser: URL spoof in navigation CVE-2019-13702 — chromium-browser: Privilege elevation in Installer CVE-2019-13703 — chromium-browser: URL bar spoofing CVE-2019-13704 — chromium-browser: CSP bypass CVE-2019-13705 — chromium-browser: Extension permission bypass CVE-2019-13706 — chromium-browser: Out-of-bounds read in PDFium CVE-2019-13707 — chromium-browser: File storage disclosure CVE-2019-13708 — chromium-browser: HTTP authentication spoof CVE-2019-13709 — chromium-browser: File download protection bypass CVE-2019-13710 — chromium-browser: File download protection bypass CVE-2019-13711 — chromium-browser: Cross-context information leak CVE-2019-13713 — chromium-browser: Cross-origin data leak CVE-2019-13714 — chromium-browser: CSS injection CVE-2019-13715 — chromium-browser: Address bar spoofing CVE-2019-13716 — chromium-browser: Service worker state error CVE-2019-13717 — chromium-browser: Notification obscured CVE-2019-13718 — chromium-browser: IDN spoof CVE-2019-13719 — chromium-browser: Notification obscured

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (23)