Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 12

• Unscored —
  CVE-2019-5828

  Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5829

  Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially pe…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5830

  Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5831

  Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5832

  Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to l…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5833

  Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5835

  Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5836

  Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit h…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5837

  Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cro…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5838

  Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convin…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5839

  Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2019-5840

  Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypas…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718256
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718257
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718259
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718264
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718269
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1477.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5828
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5828
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5828
• article
  https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2019-5829
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5829
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5829
• report
  https://access.redhat.com/security/cve/CVE-2019-5830
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5830
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5830
• report
  https://access.redhat.com/security/cve/CVE-2019-5831
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5831
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5831
• report
  https://access.redhat.com/security/cve/CVE-2019-5832
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5832
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5832
• report
  https://access.redhat.com/security/cve/CVE-2019-5833
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5833
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5833
• report
  https://access.redhat.com/security/cve/CVE-2019-5835
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5835
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5835
• report
  https://access.redhat.com/security/cve/CVE-2019-5836
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5836
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5836