RHSA-2019:3211CriticalCVSS 9.6

Red Hat Security Advisory: chromium-browser security update

Published
October 29, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (46)

📋 Description

CVE-2019-5870 — chromium-browser: Use-after-free in media CVE-2019-5871 — chromium-browser: Heap overflow in Skia CVE-2019-5872 — chromium-browser: chromium-browser: Use-after-free in Mojo CVE-2019-5874 — chromium-browser: chromium-browser: External URIs may trigger other browsers CVE-2019-5875 — chromium-browser: chromium-browser: URL bar spoof via download redirect CVE-2019-5876 — chromium-browser: Use-after-free in media CVE-2019-5877 — chromium-browser: Out-of-bounds access in V8 CVE-2019-5878 — chromium-browser: Use-after-free in V8 CVE-2019-5879 — chromium-browser: Extensions can read some local files CVE-2019-5880 — chromium-browser: SameSite cookie bypass CVE-2019-5881 — chromium-browser: Arbitrary read in SwiftShader CVE-2019-13659 — chromium-browser: URL spoof CVE-2019-13660 — chromium-browser: Full screen notification overlap CVE-2019-13661 — chromium-browser: Full screen notification spoof CVE-2019-13662 — chromium-browser: CSP bypass CVE-2019-13663 — chromium-browser: IDN spoof CVE-2019-13664 — chromium-browser: CSRF bypass CVE-2019-13665 — chromium-browser: Multiple file download protection bypass CVE-2019-13666 — chromium-browser: Side channel using storage size estimate CVE-2019-13667 — chromium-browser: URI bar spoof when using external app URIs CVE-2019-13668 — chromium-browser: Global window leak via console CVE-2019-13669 — chromium-browser: HTTP authentication spoof CVE-2019-13670 — chromium-browser: V8 memory corruption in regex CVE-2019-13671 — chromium-browser: Dialog box fails to show origin CVE-2019-13673 — chromium-browser: Cross-origin information leak using devtools CVE-2019-13674 — chromium-browser: IDN spoofing CVE-2019-13675 — chromium-browser: Extensions can be disabled by trailing slash CVE-2019-13676 — chromium-browser: Google URI shown for certificate warning CVE-2019-13677 — chromium-browser: Chrome web store origin needs to be isolated CVE-2019-13678 — chromium-browser: Download dialog spoofing CVE-2019-13679 — chromium-browser: User gesture needed for printing CVE-2019-13680 — chromium-browser: IP address spoofing to servers CVE-2019-13681 — chromium-browser: Bypass on download restrictions CVE-2019-13682 — chromium-browser: Site isolation bypass CVE-2019-13683 — chromium-browser: Exceptions leaked by devtools CVE-2019-13685 — chromium-browser: Use-after-free in UI CVE-2019-13686 — chromium-browser: Use-after-free in offline pages CVE-2019-13687 — chromium-browser: Use-after-free in media CVE-2019-13688 — chromium-browser: Use-after-free in media CVE-2019-13691 — chromium-browser: Omnibox spoof CVE-2019-13692 — chromium-browser: SOP bypass CVE-2019-13693 — chromium-browser: Use-after-free in IndexedDB CVE-2019-13694 — chromium-browser: Use-after-free in WebRTC CVE-2019-13695 — chromium-browser: Use-after-free in audio CVE-2019-13696 — chromium-browser: Use-after-free in V8 CVE-2019-13697 — chromium-browser: Cross-origin size leak

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:77.0.3865.120-2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (46)