RHSA-2019:2427HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
August 12, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (15)

CVE-2019-5857 →CVE-2019-5858 →CVE-2019-5859 →CVE-2019-5862 →CVE-2019-5865 →CVE-2019-5853 →CVE-2019-5861 →CVE-2019-5864 →CVE-2019-5850 →CVE-2019-5854 →CVE-2019-5856 →CVE-2019-5860 →CVE-2019-5851 →CVE-2019-5852 →CVE-2019-5855 →

📋 Description

CVE-2019-5850 — chromium-browser: Use-after-free in offline page fetcher CVE-2019-5851 — chromium-browser: Use-after-poison in offline audio context CVE-2019-5852 — chromium-browser: Object leak of utility functions CVE-2019-5853 — chromium-browser: Memory corruption in regexp length check CVE-2019-5854 — chromium-browser: Integer overflow in PDFium text rendering CVE-2019-5855 — chromium-browser: Integer overflow in PDFium CVE-2019-5856 — chromium-browser: Insufficient checks on filesystem: URI permissions CVE-2019-5857 — chromium-browser: Comparison of -0 and null yields crash CVE-2019-5858 — chromium-browser: Insufficient filtering of Open URL service parameters CVE-2019-5859 — chromium-browser: res: URIs can load alternative browsers CVE-2019-5860 — chromium-browser: Use-after-free in PDFium CVE-2019-5861 — chromium-browser: Click location incorrectly checked CVE-2019-5862 — chromium-browser: AppCache not robust to compromised renderers CVE-2019-5864 — chromium-browser: Insufficient port filtering in CORS for extensions CVE-2019-5865 — chromium-browser: Site isolation bypass from compromised renderer

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (18)