GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2019:3759

Vulnerability from csaf_redhat - Published: 2019-11-06 16:43 - Updated: 2026-06-28 12:32
Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Important
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 78.0.3904.70. Security Fix(es): * chromium-browser: Use-after-free in media (CVE-2019-13699) * chromium-browser: Buffer overrun in Blink (CVE-2019-13700) * chromium-browser: URL spoof in navigation (CVE-2019-13701) * chromium-browser: Privilege elevation in Installer (CVE-2019-13702) * chromium-browser: URL bar spoofing (CVE-2019-13703) * chromium-browser: CSP bypass (CVE-2019-13704) * chromium-browser: Extension permission bypass (CVE-2019-13705) * chromium-browser: Out-of-bounds read in PDFium (CVE-2019-13706) * chromium-browser: File storage disclosure (CVE-2019-13707) * chromium-browser: HTTP authentication spoof (CVE-2019-13708) * chromium-browser: File download protection bypass (CVE-2019-13709) * chromium-browser: File download protection bypass (CVE-2019-13710) * chromium-browser: Cross-context information leak (CVE-2019-13711) * chromium-browser: Cross-origin data leak (CVE-2019-13713) * chromium-browser: CSS injection (CVE-2019-13714) * chromium-browser: Address bar spoofing (CVE-2019-13715) * chromium-browser: Service worker state error (CVE-2019-13716) * chromium-browser: Notification obscured (CVE-2019-13717) * chromium-browser: IDN spoof (CVE-2019-13718) * chromium-browser: Notification obscured (CVE-2019-13719) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-13699

Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 —
Vendor Fix fix
Threats
Impact Important
CVE-2019-13700

Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Important
CVE-2019-13701

Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Important
CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13703

Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13704

Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13705

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13707

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13708

Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13709

Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13710

Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13711

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13713

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Moderate
CVE-2019-13714

Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
CVE-2019-13715

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
CVE-2019-13716

Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
CVE-2019-13717

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
CVE-2019-13718

Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
CVE-2019-13719

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Fixed 14 products, the same list as for CVE-2019-13699
Threats
Impact Low
References
URL Category
https://access.redhat.com/errata/RHSA-2019:3759 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1764756 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764757 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764758 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764759 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764760 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764761 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764762 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764763 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764764 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764765 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764766 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764767 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764768 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764769 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764770 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764771 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764772 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764773 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764774 external
https://bugzilla.redhat.com/show_bug.cgi?id=1764775 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-13699 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764756 external
https://www.cve.org/CVERecord?id=CVE-2019-13699 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13699 external
https://chromereleases.googleblog.com/2019/10/sta… external
https://access.redhat.com/security/cve/CVE-2019-13700 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764757 external
https://www.cve.org/CVERecord?id=CVE-2019-13700 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13700 external
https://access.redhat.com/security/cve/CVE-2019-13701 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764758 external
https://www.cve.org/CVERecord?id=CVE-2019-13701 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13701 external
https://access.redhat.com/security/cve/CVE-2019-13702 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764759 external
https://www.cve.org/CVERecord?id=CVE-2019-13702 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13702 external
https://access.redhat.com/security/cve/CVE-2019-13703 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764760 external
https://www.cve.org/CVERecord?id=CVE-2019-13703 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13703 external
https://access.redhat.com/security/cve/CVE-2019-13704 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764761 external
https://www.cve.org/CVERecord?id=CVE-2019-13704 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13704 external
https://access.redhat.com/security/cve/CVE-2019-13705 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764762 external
https://www.cve.org/CVERecord?id=CVE-2019-13705 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13705 external
https://access.redhat.com/security/cve/CVE-2019-13706 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764763 external
https://www.cve.org/CVERecord?id=CVE-2019-13706 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13706 external
https://access.redhat.com/security/cve/CVE-2019-13707 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764764 external
https://www.cve.org/CVERecord?id=CVE-2019-13707 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13707 external
https://access.redhat.com/security/cve/CVE-2019-13708 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764765 external
https://www.cve.org/CVERecord?id=CVE-2019-13708 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13708 external
https://access.redhat.com/security/cve/CVE-2019-13709 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764766 external
https://www.cve.org/CVERecord?id=CVE-2019-13709 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13709 external
https://access.redhat.com/security/cve/CVE-2019-13710 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764767 external
https://www.cve.org/CVERecord?id=CVE-2019-13710 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13710 external
https://access.redhat.com/security/cve/CVE-2019-13711 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764768 external
https://www.cve.org/CVERecord?id=CVE-2019-13711 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13711 external
https://access.redhat.com/security/cve/CVE-2019-13713 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764769 external
https://www.cve.org/CVERecord?id=CVE-2019-13713 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13713 external
https://access.redhat.com/security/cve/CVE-2019-13714 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764770 external
https://www.cve.org/CVERecord?id=CVE-2019-13714 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13714 external
https://access.redhat.com/security/cve/CVE-2019-13715 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764771 external
https://www.cve.org/CVERecord?id=CVE-2019-13715 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13715 external
https://access.redhat.com/security/cve/CVE-2019-13716 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764772 external
https://www.cve.org/CVERecord?id=CVE-2019-13716 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13716 external
https://access.redhat.com/security/cve/CVE-2019-13717 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764773 external
https://www.cve.org/CVERecord?id=CVE-2019-13717 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13717 external
https://access.redhat.com/security/cve/CVE-2019-13718 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764774 external
https://www.cve.org/CVERecord?id=CVE-2019-13718 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13718 external
https://access.redhat.com/security/cve/CVE-2019-13719 self
https://bugzilla.redhat.com/show_bug.cgi?id=1764775 external
https://www.cve.org/CVERecord?id=CVE-2019-13719 external
https://nvd.nist.gov/vuln/detail/CVE-2019-13719 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 78.0.3904.70.\n\nSecurity Fix(es):\n\n* chromium-browser: Use-after-free in media (CVE-2019-13699)\n\n* chromium-browser: Buffer overrun in Blink (CVE-2019-13700)\n\n* chromium-browser: URL spoof in navigation (CVE-2019-13701)\n\n* chromium-browser: Privilege elevation in Installer (CVE-2019-13702)\n\n* chromium-browser: URL bar spoofing (CVE-2019-13703)\n\n* chromium-browser: CSP bypass (CVE-2019-13704)\n\n* chromium-browser: Extension permission bypass (CVE-2019-13705)\n\n* chromium-browser: Out-of-bounds read in PDFium (CVE-2019-13706)\n\n* chromium-browser: File storage disclosure (CVE-2019-13707)\n\n* chromium-browser: HTTP authentication spoof (CVE-2019-13708)\n\n* chromium-browser: File download protection bypass (CVE-2019-13709)\n\n* chromium-browser: File download protection bypass (CVE-2019-13710)\n\n* chromium-browser: Cross-context information leak (CVE-2019-13711)\n\n* chromium-browser: Cross-origin data leak (CVE-2019-13713)\n\n* chromium-browser: CSS injection (CVE-2019-13714)\n\n* chromium-browser: Address bar spoofing (CVE-2019-13715)\n\n* chromium-browser: Service worker state error (CVE-2019-13716)\n\n* chromium-browser: Notification obscured (CVE-2019-13717)\n\n* chromium-browser: IDN spoof (CVE-2019-13718)\n\n* chromium-browser: Notification obscured (CVE-2019-13719)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3759",
        "url": "https://access.redhat.com/errata/RHSA-2019:3759"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1764756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764756"
      },
      {
        "category": "external",
        "summary": "1764757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764757"
      },
      {
        "category": "external",
        "summary": "1764758",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764758"
      },
      {
        "category": "external",
        "summary": "1764759",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764759"
      },
      {
        "category": "external",
        "summary": "1764760",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764760"
      },
      {
        "category": "external",
        "summary": "1764761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764761"
      },
      {
        "category": "external",
        "summary": "1764762",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764762"
      },
      {
        "category": "external",
        "summary": "1764763",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764763"
      },
      {
        "category": "external",
        "summary": "1764764",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764764"
      },
      {
        "category": "external",
        "summary": "1764765",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764765"
      },
      {
        "category": "external",
        "summary": "1764766",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764766"
      },
      {
        "category": "external",
        "summary": "1764767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764767"
      },
      {
        "category": "external",
        "summary": "1764768",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764768"
      },
      {
        "category": "external",
        "summary": "1764769",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764769"
      },
      {
        "category": "external",
        "summary": "1764770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764770"
      },
      {
        "category": "external",
        "summary": "1764771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764771"
      },
      {
        "category": "external",
        "summary": "1764772",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764772"
      },
      {
        "category": "external",
        "summary": "1764773",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764773"
      },
      {
        "category": "external",
        "summary": "1764774",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764774"
      },
      {
        "category": "external",
        "summary": "1764775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764775"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3759.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2026-06-28T12:32:35+00:00",
      "generator": {
        "date": "2026-06-28T12:32:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2019:3759",
      "initial_release_date": "2019-11-06T16:43:06+00:00",
      "revision_history": [
        {
          "date": "2019-11-06T16:43:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-11-06T16:43:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-28T12:32:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
                  "product_id": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@78.0.3904.70-1.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
                  "product_id": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@78.0.3904.70-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
                  "product_id": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@78.0.3904.70-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@78.0.3904.70-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-13699",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use-after-free in media",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13699"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13699",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13699"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13699",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13699"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use-after-free in media"
    },
    {
      "cve": "CVE-2019-13700",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Buffer overrun in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13700"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13700"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Buffer overrun in Blink"
    },
    {
      "cve": "CVE-2019-13701",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764758"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: URL spoof in navigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13701"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764758",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764758"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13701",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13701"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13701",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13701"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: URL spoof in navigation"
    },
    {
      "cve": "CVE-2019-13702",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764759"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Privilege elevation in Installer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13702"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764759",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764759"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13702",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13702"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13702",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13702"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Privilege elevation in Installer"
    },
    {
      "cve": "CVE-2019-13703",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764760"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: URL bar spoofing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13703"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764760",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764760"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13703",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13703"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13703",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13703"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: URL bar spoofing"
    },
    {
      "cve": "CVE-2019-13704",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CSP bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13704"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13704",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13704"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13704",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13704"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: CSP bypass"
    },
    {
      "cve": "CVE-2019-13705",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Extension permission bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13705"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13705"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13705",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13705"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Extension permission bypass"
    },
    {
      "cve": "CVE-2019-13706",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764763"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out-of-bounds read in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13706"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764763",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764763"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13706",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13706"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13706",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13706"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Out-of-bounds read in PDFium"
    },
    {
      "cve": "CVE-2019-13707",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764764"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: File storage disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13707"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764764",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764764"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13707",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13707"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13707",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13707"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: File storage disclosure"
    },
    {
      "cve": "CVE-2019-13708",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764765"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: HTTP authentication spoof",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13708"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764765",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764765"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13708",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13708"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13708",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13708"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: HTTP authentication spoof"
    },
    {
      "cve": "CVE-2019-13709",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764766"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: File download protection bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13709"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764766",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764766"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13709"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: File download protection bypass"
    },
    {
      "cve": "CVE-2019-13710",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: File download protection bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13710"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13710"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: File download protection bypass"
    },
    {
      "cve": "CVE-2019-13711",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Cross-context information leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13711"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13711",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13711"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13711",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13711"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Cross-context information leak"
    },
    {
      "cve": "CVE-2019-13713",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764769"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Cross-origin data leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13713"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764769",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764769"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13713",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13713"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13713",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13713"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Cross-origin data leak"
    },
    {
      "cve": "CVE-2019-13714",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CSS injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13714"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13714"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: CSS injection"
    },
    {
      "cve": "CVE-2019-13715",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Address bar spoofing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13715"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13715",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13715"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13715",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13715"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Address bar spoofing"
    },
    {
      "cve": "CVE-2019-13716",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764772"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Service worker state error",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13716"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764772",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764772"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13716",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13716"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13716",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13716"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Service worker state error"
    },
    {
      "cve": "CVE-2019-13717",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764773"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Notification obscured",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13717"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764773",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764773"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13717",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13717"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13717",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13717"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Notification obscured"
    },
    {
      "cve": "CVE-2019-13718",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764774"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: IDN spoof",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13718"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764774",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764774"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13718",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13718"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13718",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13718"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: IDN spoof"
    },
    {
      "cve": "CVE-2019-13719",
      "discovery_date": "2019-10-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764775"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Notification obscured",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-13719"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764775",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764775"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-13719",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-13719"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13719",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13719"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html",
          "url": "https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html"
        }
      ],
      "release_date": "2019-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-06T16:43:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3759"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:78.0.3904.70-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:78.0.3904.70-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Notification obscured"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.