RHSA-2019:2427
Vulnerability from csaf_redhat - Published: 2019-08-12 07:48 - Updated: 2025-11-21 18:09Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Important
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 76.0.3809.87.
Security Fix(es):
* chromium-browser: Use-after-free in offline page fetcher (CVE-2019-5850)
* chromium-browser: Use-after-poison in offline audio context (CVE-2019-5851)
* chromium-browser: Memory corruption in regexp length check (CVE-2019-5853)
* chromium-browser: res: URIs can load alternative browsers (CVE-2019-5859)
* chromium-browser: Use-after-free in PDFium (CVE-2019-5860)
* chromium-browser: Integer overflow in PDFium (CVE-2019-5855)
* chromium-browser: Insufficient checks on filesystem: URI permissions (CVE-2019-5856)
* chromium-browser: Site isolation bypass from compromised renderer (CVE-2019-5865)
* chromium-browser: Object leak of utility functions (CVE-2019-5852)
* chromium-browser: Integer overflow in PDFium text rendering (CVE-2019-5854)
* chromium-browser: Comparison of -0 and null yields crash (CVE-2019-5857)
* chromium-browser: Insufficient filtering of Open URL service parameters (CVE-2019-5858)
* chromium-browser: Click location incorrectly checked (CVE-2019-5861)
* chromium-browser: AppCache not robust to compromised renderers (CVE-2019-5862)
* chromium-browser: Insufficient port filtering in CORS for extensions (CVE-2019-5864)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
8.8 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
8.8 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
8.8 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
6.5 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
6.5 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
8.8 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
8.8 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
4.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
6.5 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Chromium must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2019:2427
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 76.0.3809.87.\n\nSecurity Fix(es):\n\n* chromium-browser: Use-after-free in offline page fetcher (CVE-2019-5850)\n\n* chromium-browser: Use-after-poison in offline audio context (CVE-2019-5851)\n\n* chromium-browser: Memory corruption in regexp length check (CVE-2019-5853)\n\n* chromium-browser: res: URIs can load alternative browsers (CVE-2019-5859)\n\n* chromium-browser: Use-after-free in PDFium (CVE-2019-5860)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5855)\n\n* chromium-browser: Insufficient checks on filesystem: URI permissions (CVE-2019-5856)\n\n* chromium-browser: Site isolation bypass from compromised renderer (CVE-2019-5865)\n\n* chromium-browser: Object leak of utility functions (CVE-2019-5852)\n\n* chromium-browser: Integer overflow in PDFium text rendering (CVE-2019-5854)\n\n* chromium-browser: Comparison of -0 and null yields crash (CVE-2019-5857)\n\n* chromium-browser: Insufficient filtering of Open URL service parameters (CVE-2019-5858)\n\n* chromium-browser: Click location incorrectly checked (CVE-2019-5861)\n\n* chromium-browser: AppCache not robust to compromised renderers (CVE-2019-5862)\n\n* chromium-browser: Insufficient port filtering in CORS for extensions (CVE-2019-5864)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2427",
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1735496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735496"
},
{
"category": "external",
"summary": "1737721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737721"
},
{
"category": "external",
"summary": "1737722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737722"
},
{
"category": "external",
"summary": "1737723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737723"
},
{
"category": "external",
"summary": "1737724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737724"
},
{
"category": "external",
"summary": "1737725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737725"
},
{
"category": "external",
"summary": "1737727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737727"
},
{
"category": "external",
"summary": "1737729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737729"
},
{
"category": "external",
"summary": "1737730",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737730"
},
{
"category": "external",
"summary": "1737731",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737731"
},
{
"category": "external",
"summary": "1737732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737732"
},
{
"category": "external",
"summary": "1737733",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737733"
},
{
"category": "external",
"summary": "1737734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737734"
},
{
"category": "external",
"summary": "1737735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737735"
},
{
"category": "external",
"summary": "1737736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737736"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2427.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2025-11-21T18:09:44+00:00",
"generator": {
"date": "2025-11-21T18:09:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2019:2427",
"initial_release_date": "2019-08-12T07:48:46+00:00",
"revision_history": [
{
"date": "2019-08-12T07:48:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-08-12T07:48:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:09:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"product": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"product_id": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@76.0.3809.87-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"product": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"product_id": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@76.0.3809.87-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"product_id": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@76.0.3809.87-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"product_id": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@76.0.3809.87-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5850",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737721"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use-after-free in offline page fetcher",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "RHBZ#1737721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737721"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5850",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5850"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5850",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5850"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use-after-free in offline page fetcher"
},
{
"cve": "CVE-2019-5851",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737724"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use-after-poison in offline audio context",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "RHBZ#1737724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737724"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5851",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5851"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use-after-poison in offline audio context"
},
{
"cve": "CVE-2019-5852",
"discovery_date": "2019-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1735496"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Object leak of utility functions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "RHBZ#1735496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5852",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5852"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Object leak of utility functions"
},
{
"cve": "CVE-2019-5853",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737723"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Memory corruption in regexp length check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "RHBZ#1737723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5853",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5853"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Memory corruption in regexp length check"
},
{
"cve": "CVE-2019-5854",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737736"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium text rendering",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "RHBZ#1737736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5854",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5854"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5854",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5854"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Integer overflow in PDFium text rendering"
},
{
"cve": "CVE-2019-5855",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737729"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "RHBZ#1737729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5855"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5856",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737727"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Insufficient checks on filesystem: URI permissions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "RHBZ#1737727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737727"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5856",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5856"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Insufficient checks on filesystem: URI permissions"
},
{
"cve": "CVE-2019-5857",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737735"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Comparison of -0 and null yields crash",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "RHBZ#1737735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5857",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5857"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Comparison of -0 and null yields crash"
},
{
"cve": "CVE-2019-5858",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737731"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Insufficient filtering of Open URL service parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "RHBZ#1737731",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737731"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5858",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5858"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Insufficient filtering of Open URL service parameters"
},
{
"cve": "CVE-2019-5859",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737725"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: res: URIs can load alternative browsers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "RHBZ#1737725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737725"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5859",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5859"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: res: URIs can load alternative browsers"
},
{
"cve": "CVE-2019-5860",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737722"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use-after-free in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "RHBZ#1737722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5860",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5860"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use-after-free in PDFium"
},
{
"cve": "CVE-2019-5861",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737734"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Click location incorrectly checked",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "RHBZ#1737734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5861",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5861"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5861",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5861"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Click location incorrectly checked"
},
{
"cve": "CVE-2019-5862",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737733"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: AppCache not robust to compromised renderers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "RHBZ#1737733",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737733"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5862",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5862"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: AppCache not robust to compromised renderers"
},
{
"cve": "CVE-2019-5864",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737732"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Insufficient port filtering in CORS for extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "RHBZ#1737732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5864",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5864"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Insufficient port filtering in CORS for extensions"
},
{
"cve": "CVE-2019-5865",
"discovery_date": "2019-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1737730"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Site isolation bypass from compromised renderer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "RHBZ#1737730",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737730"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5865",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5865"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5865",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5865"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-12T07:48:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2427"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:76.0.3809.87-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:76.0.3809.87-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Site isolation bypass from compromised renderer"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…