Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-5863 (GCVE-0-2019-5863)
Vulnerability from cvelistv5 – Published: 2021-11-02 20:55 – Updated: 2021-11-02 20:55DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2021-11-02T20:55:10.000Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2019-5863",
"datePublished": "2021-11-02T20:55:10.000Z",
"dateRejected": "2021-11-02T20:55:10.000Z",
"dateReserved": "2019-01-09T00:00:00.000Z",
"dateUpdated": "2021-11-02T20:55:10.000Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none\"}]",
"id": "CVE-2019-5863",
"lastModified": "2023-11-07T03:12:53.230",
"published": "2021-11-02T21:15:07.593",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Rejected"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-5863\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2021-11-02T21:15:07.593\",\"lastModified\":\"2023-11-07T03:12:53.230\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none\"}],\"metrics\":{},\"references\":[]}}"
}
}
CERTFR-2019-AVI-363
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 76.0.3809.87",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-5851",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5851"
},
{
"name": "CVE-2019-5862",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5862"
},
{
"name": "CVE-2019-5850",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5850"
},
{
"name": "CVE-2019-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5855"
},
{
"name": "CVE-2019-5860",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5860"
},
{
"name": "CVE-2019-5865",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5865"
},
{
"name": "CVE-2019-5857",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5857"
},
{
"name": "CVE-2019-5859",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5859"
},
{
"name": "CVE-2019-5854",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5854"
},
{
"name": "CVE-2019-5861",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5861"
},
{
"name": "CVE-2019-5863",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5863"
},
{
"name": "CVE-2019-5858",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5858"
},
{
"name": "CVE-2019-5852",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5852"
},
{
"name": "CVE-2019-5853",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5853"
},
{
"name": "CVE-2019-5856",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5856"
},
{
"name": "CVE-2019-5864",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5864"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-363",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-07-31T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 30 juillet 2019",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
]
}
CERTFR-2019-AVI-363
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 76.0.3809.87",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-5851",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5851"
},
{
"name": "CVE-2019-5862",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5862"
},
{
"name": "CVE-2019-5850",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5850"
},
{
"name": "CVE-2019-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5855"
},
{
"name": "CVE-2019-5860",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5860"
},
{
"name": "CVE-2019-5865",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5865"
},
{
"name": "CVE-2019-5857",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5857"
},
{
"name": "CVE-2019-5859",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5859"
},
{
"name": "CVE-2019-5854",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5854"
},
{
"name": "CVE-2019-5861",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5861"
},
{
"name": "CVE-2019-5863",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5863"
},
{
"name": "CVE-2019-5858",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5858"
},
{
"name": "CVE-2019-5852",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5852"
},
{
"name": "CVE-2019-5853",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5853"
},
{
"name": "CVE-2019-5856",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5856"
},
{
"name": "CVE-2019-5864",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5864"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-363",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-07-31T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 30 juillet 2019",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
]
}
BDU:2019-02863
Vulnerability from fstec - Published: 30.07.2019{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Google Inc",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "9 (Debian GNU/Linux), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), \u0434\u043e 76.0.3809.87 (Google Chrome), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Google Chrome:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 80.0.3987.162-1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 chromium) \u0434\u043e 80.0.3987.149-1~deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 chromium) \u0434\u043e 80.0.3987.149-1~deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "30.07.2019",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.08.2019",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2019-02863",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-5863",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Google Chrome",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Apple Inc. MacOS . , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux - , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Microsoft Corp Windows - , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WebUSB \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CWE-416)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WebUSB \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2019-5863\nhttps://security-tracker.debian.org/tracker/CVE-2019-5863\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-416",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,3)"
}
CNVD-2019-26395
Vulnerability from cnvd - Published: 2019-08-08目前厂商已发布升级补丁以修复漏洞,补丁获取链接: https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
| Name | Google Chrome <76.0.3809.87 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-5863",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-5863"
}
},
"description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome 76.0.3809.87\u4e4b\u524d\u7248\u672c\u4e2d\u7684WebUSB\uff08Windows\uff09\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8bf1\u4f7f\u7528\u6237\u8bbf\u95ee\u7279\u5236\u7684\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
"discovererName": "unknwon",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-26395",
"openTime": "2019-08-08",
"patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome 76.0.3809.87\u4e4b\u524d\u7248\u672c\u4e2d\u7684WebUSB\uff08Windows\uff09\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8bf1\u4f7f\u7528\u6237\u8bbf\u95ee\u7279\u5236\u7684\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2019-26395\uff09\u7684\u8865\u4e01",
"products": {
"product": "Google Chrome \u003c76.0.3809.87"
},
"referenceLink": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"serverity": "\u9ad8",
"submitTime": "2019-08-02",
"title": "Google Chrome\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2019-26395\uff09"
}
FKIE_CVE-2019-5863
Vulnerability from fkie_nvd - Published: 2021-11-02 21:15 - Updated: 2023-11-07 03:12| URL | Tags |
|---|
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
}
],
"id": "CVE-2019-5863",
"lastModified": "2023-11-07T03:12:53.230",
"metrics": {},
"published": "2021-11-02T21:15:07.593",
"references": [],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Rejected"
}
GSD-2019-5863
Vulnerability from gsd - Updated: 2023-12-13 01:23{
"GSD": {
"alias": "CVE-2019-5863",
"description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"id": "GSD-2019-5863",
"references": [
"https://www.suse.com/security/cve/CVE-2019-5863.html",
"https://advisories.mageia.org/CVE-2019-5863.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-5863"
],
"details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"id": "GSD-2019-5863",
"modified": "2023-12-13T01:23:56.150034Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-5863",
"STATE": "REJECT"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
}
]
}
}
}
}
OPENSUSE-SU-2019:1848-1
Vulnerability from csaf_opensuse - Published: 2019-08-12 16:23 - Updated: 2019-08-12 16:23| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium to version 76.0.3809.87 fixes the following issues:\n\n- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)\n- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)\n- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)\n- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)\n- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)\n- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)\n- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)\n- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)\n- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)\n- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)\n- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)\n- CVE-2019-5861: Click location incorrectly checked (boo#1143492)\n- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)\n- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)\n- CVE-2019-5852: Object leak of utility functions (boo#1143492)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1848",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1848-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1848-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6/#5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1848-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6/#5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6"
},
{
"category": "self",
"summary": "SUSE Bug 1143492",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "self",
"summary": "SUSE Bug 1144625",
"url": "https://bugzilla.suse.com/1144625"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-08-12T16:23:56Z",
"generator": {
"date": "2019-08-12T16:23:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1848-1",
"initial_release_date": "2019-08-12T16:23:56Z",
"revision_history": [
{
"date": "2019-08-12T16:23:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"product": {
"name": "chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"product_id": "chromedriver-76.0.3809.87-lp150.224.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-lp150.224.1.x86_64",
"product": {
"name": "chromium-76.0.3809.87-lp150.224.1.x86_64",
"product_id": "chromium-76.0.3809.87-lp150.224.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-lp150.224.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64"
},
"product_reference": "chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-lp150.224.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
},
"product_reference": "chromium-76.0.3809.87-lp150.224.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-76.0.3809.87-lp150.224.1.x86_64",
"openSUSE Leap 15.0:chromium-76.0.3809.87-lp150.224.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:23:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
}
]
}
OPENSUSE-SU-2019:1849-1
Vulnerability from csaf_opensuse - Published: 2019-08-12 16:24 - Updated: 2019-08-12 16:24| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium to version 76.0.3809.87 fixes the following issues:\n\n- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)\n- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)\n- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)\n- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)\n- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)\n- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)\n- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)\n- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)\n- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)\n- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)\n- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)\n- CVE-2019-5861: Click location incorrectly checked (boo#1143492)\n- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)\n- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)\n- CVE-2019-5852: Object leak of utility functions (boo#1143492)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1849",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1849-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1849-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WQECSHEVYXDAI56ELOTP64T44DSAKEKK/#WQECSHEVYXDAI56ELOTP64T44DSAKEKK"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1849-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WQECSHEVYXDAI56ELOTP64T44DSAKEKK/#WQECSHEVYXDAI56ELOTP64T44DSAKEKK"
},
{
"category": "self",
"summary": "SUSE Bug 1143492",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "self",
"summary": "SUSE Bug 1144625",
"url": "https://bugzilla.suse.com/1144625"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-08-12T16:24:35Z",
"generator": {
"date": "2019-08-12T16:24:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1849-1",
"initial_release_date": "2019-08-12T16:24:35Z",
"revision_history": [
{
"date": "2019-08-12T16:24:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"product": {
"name": "chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"product_id": "chromedriver-76.0.3809.87-lp151.2.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-lp151.2.15.1.x86_64",
"product": {
"name": "chromium-76.0.3809.87-lp151.2.15.1.x86_64",
"product_id": "chromium-76.0.3809.87-lp151.2.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-lp151.2.15.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64"
},
"product_reference": "chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-lp151.2.15.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
},
"product_reference": "chromium-76.0.3809.87-lp151.2.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:chromedriver-76.0.3809.87-lp151.2.15.1.x86_64",
"openSUSE Leap 15.1:chromium-76.0.3809.87-lp151.2.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-12T16:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
}
]
}
OPENSUSE-SU-2019:1853-1
Vulnerability from csaf_opensuse - Published: 2019-08-13 09:49 - Updated: 2019-08-13 09:49| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium to version 76.0.3809.87 fixes the following issues:\n\n- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)\n- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)\n- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)\n- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)\n- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)\n- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)\n- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)\n- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)\n- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)\n- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)\n- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)\n- CVE-2019-5861: Click location incorrectly checked (boo#1143492)\n- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)\n- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)\n- CVE-2019-5852: Object leak of utility functions (boo#1143492)\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1853",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1853-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1853-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA/#JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1853-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA/#JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA"
},
{
"category": "self",
"summary": "SUSE Bug 1143492",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "self",
"summary": "SUSE Bug 1144625",
"url": "https://bugzilla.suse.com/1144625"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-08-13T09:49:04Z",
"generator": {
"date": "2019-08-13T09:49:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1853-1",
"initial_release_date": "2019-08-13T09:49:04Z",
"revision_history": [
{
"date": "2019-08-13T09:49:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"product": {
"name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"product_id": "chromedriver-76.0.3809.87-bp150.220.1.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-bp150.220.1.aarch64",
"product": {
"name": "chromium-76.0.3809.87-bp150.220.1.aarch64",
"product_id": "chromium-76.0.3809.87-bp150.220.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"product": {
"name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"product_id": "chromedriver-76.0.3809.87-bp150.220.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-bp150.220.1.x86_64",
"product": {
"name": "chromium-76.0.3809.87-bp150.220.1.x86_64",
"product_id": "chromium-76.0.3809.87-bp150.220.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15",
"product": {
"name": "SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64"
},
"product_reference": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64"
},
"product_reference": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-bp150.220.1.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64"
},
"product_reference": "chromium-76.0.3809.87-bp150.220.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-bp150.220.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
},
"product_reference": "chromium-76.0.3809.87-bp150.220.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
"SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:49:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
}
]
}
OPENSUSE-SU-2019:1901-1
Vulnerability from csaf_opensuse - Published: 2019-08-15 08:57 - Updated: 2019-08-15 08:57| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium to version 76.0.3809.87 fixes the following issues:\n\n- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)\n- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)\n- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)\n- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)\n- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)\n- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)\n- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)\n- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)\n- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)\n- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)\n- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)\n- CVE-2019-5861: Click location incorrectly checked (boo#1143492)\n- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)\n- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)\n- CVE-2019-5852: Object leak of utility functions (boo#1143492)\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1901",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1901-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1901-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2/#XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1901-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2/#XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2"
},
{
"category": "self",
"summary": "SUSE Bug 1143492",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "self",
"summary": "SUSE Bug 1144625",
"url": "https://bugzilla.suse.com/1144625"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-08-15T08:57:09Z",
"generator": {
"date": "2019-08-15T08:57:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1901-1",
"initial_release_date": "2019-08-15T08:57:09Z",
"revision_history": [
{
"date": "2019-08-15T08:57:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"product": {
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"product_id": "chromedriver-76.0.3809.87-bp151.3.3.3.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"product": {
"name": "chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"product_id": "chromium-76.0.3809.87-bp151.3.3.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"product": {
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"product_id": "chromedriver-76.0.3809.87-bp151.3.3.3.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-76.0.3809.87-bp151.3.3.3.x86_64",
"product": {
"name": "chromium-76.0.3809.87-bp151.3.3.3.x86_64",
"product_id": "chromium-76.0.3809.87-bp151.3.3.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP1",
"product": {
"name": "SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.aarch64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64"
},
"product_reference": "chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-76.0.3809.87-bp151.3.3.3.x86_64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64"
},
"product_reference": "chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-bp151.3.3.3.aarch64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64"
},
"product_reference": "chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-76.0.3809.87-bp151.3.3.3.x86_64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
},
"product_reference": "chromium-76.0.3809.87-bp151.3.3.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromedriver-76.0.3809.87-bp151.3.3.3.x86_64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.aarch64",
"SUSE Package Hub 15 SP1:chromium-76.0.3809.87-bp151.3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T08:57:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.