Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 15

• Unscored —
  CVE-2019-5850

  Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5851

  Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5852

  Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5853

  Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentia…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5854

  Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5855

  Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5856

  Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had com…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5857

  Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentia…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5858

  Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local atta…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5859

  Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to by…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5860

  Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5861

  Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5862

  Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5864

  Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2019-5865

  Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1735496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737721
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737723
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737724
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737725
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737727
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737729
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737730
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737732
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737734
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737735
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737736
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2427.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5850
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5850
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5850
• article
  https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
• report
  https://access.redhat.com/security/cve/CVE-2019-5851
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5851
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5851
• report
  https://access.redhat.com/security/cve/CVE-2019-5852
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5852
• report
  https://access.redhat.com/security/cve/CVE-2019-5853
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5853
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5853
• report
  https://access.redhat.com/security/cve/CVE-2019-5854
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5854
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5854
• report
  https://access.redhat.com/security/cve/CVE-2019-5855
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5855
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5855
• report
  https://access.redhat.com/security/cve/CVE-2019-5856
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5856
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5856