RHSA-2019:0309CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
February 12, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (29)

CVE-2019-5764 →CVE-2019-5770 →CVE-2019-5773 →CVE-2019-5781 →CVE-2019-5758 →CVE-2019-5761 →CVE-2019-5763 →CVE-2019-5771 →CVE-2019-5774 →CVE-2019-5777 →CVE-2019-5755 →CVE-2019-5769 →CVE-2019-5754 →CVE-2019-5779 →CVE-2019-5765 →CVE-2019-5768 →CVE-2019-5775 →CVE-2019-5759 →CVE-2019-5776 →CVE-2019-5778 →CVE-2019-5767 →CVE-2019-5766 →CVE-2019-5772 →CVE-2019-5782 →CVE-2019-5780 →CVE-2019-5756 →CVE-2019-5757 →CVE-2019-5760 →CVE-2019-5762 →

📋 Description

CVE-2019-5754 — chromium-browser: Inappropriate implementation in QUIC Networking CVE-2019-5755 — chromium-browser: Inappropriate implementation in V8 CVE-2019-5756 — chromium-browser: Use after free in PDFium CVE-2019-5757 — chromium-browser: Type Confusion in SVG CVE-2019-5758 — chromium-browser: Use after free in Blink CVE-2019-5759 — chromium-browser: Use after free in HTML select elements CVE-2019-5760 — chromium-browser: Use after free in WebRTC CVE-2019-5761 — chromium-browser: Use after free in SwiftShader CVE-2019-5762 — chromium-browser: Use after free in PDFium CVE-2019-5763 — chromium-browser: Insufficient validation of untrusted input in V8 CVE-2019-5764 — chromium-browser: Use after free in WebRTC CVE-2019-5765 — chromium-browser: Insufficient policy enforcement in the browser CVE-2019-5766 — chromium-browser: Insufficient policy enforcement in Canvas CVE-2019-5767 — chromium-browser: Incorrect security UI in WebAPKs CVE-2019-5768 — chromium-browser: Insufficient policy enforcement in DevTools CVE-2019-5769 — chromium-browser: Insufficient validation of untrusted input in Blink CVE-2019-5770 — chromium-browser: Heap buffer overflow in WebGL CVE-2019-5771 — chromium-browser: Heap buffer overflow in SwiftShader CVE-2019-5772 — chromium-browser: Use after free in PDFium CVE-2019-5773 — chromium-browser: Insufficient data validation in IndexedDB CVE-2019-5774 — chromium-browser: Insufficient validation of untrusted input in SafeBrowsing CVE-2019-5775 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5776 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5777 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5778 — chromium-browser: Insufficient policy enforcement in Extensions CVE-2019-5779 — chromium-browser: Insufficient policy enforcement in ServiceWorker CVE-2019-5780 — chromium-browser: Insufficient policy enforcement CVE-2019-5781 — chromium-browser: Insufficient policy enforcement in Omnibox CVE-2019-5782 — chromium-browser: Inappropriate implementation in V8

🎯 Affected products15

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (32)