RHSA-2019:4238CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
December 16, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (37)

CVE-2019-13730 →CVE-2019-13743 →CVE-2019-13745 →CVE-2019-13751 →CVE-2019-13755 →CVE-2019-13758 →CVE-2019-13762 →CVE-2019-13726 →CVE-2019-13738 →CVE-2019-13739 →CVE-2019-13752 →CVE-2019-13754 →CVE-2019-13763 →CVE-2019-13740 →CVE-2019-13746 →CVE-2019-13727 →CVE-2019-13735 →CVE-2019-13741 →CVE-2019-13744 →CVE-2019-13749 →CVE-2019-13757 →CVE-2019-13729 →CVE-2019-13750 →CVE-2019-13753 →CVE-2019-13742 →CVE-2019-13756 →CVE-2019-13732 →CVE-2019-13736 →CVE-2019-13747 →CVE-2019-13748 →CVE-2019-13759 →CVE-2019-13761 →CVE-2019-13764 →CVE-2019-13725 →CVE-2019-13728 →CVE-2019-13734 →CVE-2019-13737 →

📋 Description

CVE-2019-13725 — chromium-browser: Use after free in Bluetooth CVE-2019-13726 — chromium-browser: Heap buffer overflow in password manager CVE-2019-13727 — chromium-browser: Insufficient policy enforcement in WebSockets CVE-2019-13728 — chromium-browser: Out of bounds write in V8 CVE-2019-13729 — chromium-browser: Use after free in WebSockets CVE-2019-13730 — chromium-browser: Type Confusion in V8 CVE-2019-13732 — chromium-browser: Use after free in WebAudio CVE-2019-13734 — sqlite: fts3: improve shadow table corruption detection CVE-2019-13735 — chromium-browser: Out of bounds write in V8 CVE-2019-13736 — chromium-browser: Integer overflow in PDFium CVE-2019-13737 — chromium-browser: Insufficient policy enforcement in autocomplete CVE-2019-13738 — chromium-browser: Insufficient policy enforcement in navigation CVE-2019-13739 — chromium-browser: Incorrect security UI in Omnibox CVE-2019-13740 — chromium-browser: Incorrect security UI in sharing CVE-2019-13741 — chromium-browser: Insufficient validation of untrusted input in Blink CVE-2019-13742 — chromium-browser: Incorrect security UI in Omnibox CVE-2019-13743 — chromium-browser: Incorrect security UI in external protocol handling CVE-2019-13744 — chromium-browser: Insufficient policy enforcement in cookies CVE-2019-13745 — chromium-browser: Insufficient policy enforcement in audio CVE-2019-13746 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-13747 — chromium-browser: Uninitialized Use in rendering CVE-2019-13748 — chromium-browser: Insufficient policy enforcement in developer tools CVE-2019-13749 — chromium-browser: Incorrect security UI in Omnibox CVE-2019-13750 — sqlite: dropping of shadow tables not restricted in defensive mode CVE-2019-13751 — sqlite: fts3: improve detection of corrupted records CVE-2019-13752 — sqlite: fts3: improve shadow table corruption detection CVE-2019-13753 — sqlite: fts3: incorrectly removed corruption check CVE-2019-13754 — chromium-browser: Insufficient policy enforcement in extensions CVE-2019-13755 — chromium-browser: Insufficient policy enforcement in extensions CVE-2019-13756 — chromium-browser: Incorrect security UI in printing CVE-2019-13757 — chromium-browser: Incorrect security UI in Omnibox CVE-2019-13758 — chromium-browser: Insufficient policy enforcement in navigation CVE-2019-13759 — chromium-browser: Incorrect security UI in interstitials CVE-2019-13761 — chromium-browser: Incorrect security UI in Omnibox CVE-2019-13762 — chromium-browser: Insufficient policy enforcement in downloads CVE-2019-13763 — chromium-browser: Insufficient policy enforcement in payments CVE-2019-13764 — chromium-browser: Type Confusion in V8

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:79.0.3945.79-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (40)