Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 29

• Unscored —
  CVE-2019-5754

  Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5755

  Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5756

  Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5757

  An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentia…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5758

  Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to pote…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5759

  Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5760

  Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5761

  Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker t…

  Google Chrome Browsers
  Feb 19, 2019
• Unscored —
  CVE-2019-5762

  Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5763

  Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5764

  Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5765

  An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5766

  Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5767

  Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attack…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5768

  DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5769

  Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5770

  Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an o…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5771

  An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to exe…

  Google Chrome Browsers
  Feb 19, 2019
• Unscored —
  CVE-2019-5772

  Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5773

  Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5774

  Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 7…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5775

  Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5776

  Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5777

  Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5778

  A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5779

  Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to byp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5780

  Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5781

  Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019
• Unscored —
  CVE-2019-5782 Public exploit EPSS 13%

  Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute ar…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 19, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670737
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670738
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670739
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670740
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670741
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670742
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670743
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670745
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670746
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670748
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670749
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670751
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670753
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670754
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670759
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670760
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670771
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0309.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5754
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5754
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5754
• article
  https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2019-5755
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5755
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5755
• report
  https://access.redhat.com/security/cve/CVE-2019-5756