RHSA-2019_1021
Vulnerability from csaf_redhat - Published: 2019-05-07 17:06 - Updated: 2024-11-15 09:30Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 74.0.3729.108.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in PDFium (CVE-2019-5805)\n\n* chromium-browser: Integer overflow in Angle (CVE-2019-5806)\n\n* chromium-browser: Memory corruption in V8 (CVE-2019-5807)\n\n* chromium-browser: Use after free in Blink (CVE-2019-5808)\n\n* chromium-browser: Use after free in Blink (CVE-2019-5809)\n\n* chromium-browser: User information disclosure in Autofill (CVE-2019-5810)\n\n* chromium-browser: CORS bypass in Blink (CVE-2019-5811)\n\n* chromium-browser: Out of bounds read in V8 (CVE-2019-5813)\n\n* chromium-browser: CORS bypass in Blink (CVE-2019-5814)\n\n* chromium-browser: Heap buffer overflow in Blink (CVE-2019-5815)\n\n* chromium-browser: Uninitialized value in media reader (CVE-2019-5818)\n\n* chromium-browser: Incorrect escaping in developer tools (CVE-2019-5819)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5820)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5821)\n\n* chromium-browser: CORS bypass in download manager (CVE-2019-5822)\n\n* chromium-browser: Forced navigation from service worker (CVE-2019-5823)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1021",
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1702895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702895"
},
{
"category": "external",
"summary": "1702896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702896"
},
{
"category": "external",
"summary": "1702897",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702897"
},
{
"category": "external",
"summary": "1702898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702898"
},
{
"category": "external",
"summary": "1702899",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702899"
},
{
"category": "external",
"summary": "1702900",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702900"
},
{
"category": "external",
"summary": "1702901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702901"
},
{
"category": "external",
"summary": "1702903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702903"
},
{
"category": "external",
"summary": "1702904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702904"
},
{
"category": "external",
"summary": "1702905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702905"
},
{
"category": "external",
"summary": "1702908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702908"
},
{
"category": "external",
"summary": "1702909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702909"
},
{
"category": "external",
"summary": "1702910",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702910"
},
{
"category": "external",
"summary": "1702911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702911"
},
{
"category": "external",
"summary": "1702912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702912"
},
{
"category": "external",
"summary": "1702913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702913"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1021.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2024-11-15T09:30:54+00:00",
"generator": {
"date": "2024-11-15T09:30:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1021",
"initial_release_date": "2019-05-07T17:06:08+00:00",
"revision_history": [
{
"date": "2019-05-07T17:06:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-07T17:06:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T09:30:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"product_id": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@74.0.3729.108-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"product_id": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@74.0.3729.108-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"product": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"product_id": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@74.0.3729.108-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"product": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"product_id": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@74.0.3729.108-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5805",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702895"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5805"
},
{
"category": "external",
"summary": "RHBZ#1702895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702895"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5805",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5805"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5805",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5805"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in PDFium"
},
{
"cve": "CVE-2019-5806",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702896"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in Angle",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5806"
},
{
"category": "external",
"summary": "RHBZ#1702896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5806",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5806"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5806",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5806"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Integer overflow in Angle"
},
{
"cve": "CVE-2019-5807",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702897"
}
],
"notes": [
{
"category": "description",
"text": "Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Memory corruption in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5807"
},
{
"category": "external",
"summary": "RHBZ#1702897",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702897"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5807",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5807"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5807",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5807"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Memory corruption in V8"
},
{
"cve": "CVE-2019-5808",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702898"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in Blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5808"
},
{
"category": "external",
"summary": "RHBZ#1702898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5808",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5808"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5808",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5808"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in Blink"
},
{
"cve": "CVE-2019-5809",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702899"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in Blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5809"
},
{
"category": "external",
"summary": "RHBZ#1702899",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702899"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5809",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5809"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5809",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5809"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in Blink"
},
{
"cve": "CVE-2019-5810",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702900"
}
],
"notes": [
{
"category": "description",
"text": "Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: User information disclosure in Autofill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5810"
},
{
"category": "external",
"summary": "RHBZ#1702900",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702900"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5810",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5810"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: User information disclosure in Autofill"
},
{
"cve": "CVE-2019-5811",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702901"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CORS bypass in Blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5811"
},
{
"category": "external",
"summary": "RHBZ#1702901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5811",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5811"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CORS bypass in Blink"
},
{
"cve": "CVE-2019-5813",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702903"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5813"
},
{
"category": "external",
"summary": "RHBZ#1702903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702903"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5813",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5813"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5813",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5813"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in V8"
},
{
"cve": "CVE-2019-5814",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702904"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CORS bypass in Blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5814"
},
{
"category": "external",
"summary": "RHBZ#1702904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5814",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5814"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CORS bypass in Blink"
},
{
"cve": "CVE-2019-5815",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702905"
}
],
"notes": [
{
"category": "description",
"text": "Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Heap buffer overflow in Blink",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5815"
},
{
"category": "external",
"summary": "RHBZ#1702905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702905"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5815",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5815"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Heap buffer overflow in Blink"
},
{
"cve": "CVE-2019-5818",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702908"
}
],
"notes": [
{
"category": "description",
"text": "Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Uninitialized value in media reader",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5818"
},
{
"category": "external",
"summary": "RHBZ#1702908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702908"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5818",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5818"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Uninitialized value in media reader"
},
{
"cve": "CVE-2019-5819",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702909"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Incorrect escaping in developer tools",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5819"
},
{
"category": "external",
"summary": "RHBZ#1702909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5819"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Incorrect escaping in developer tools"
},
{
"cve": "CVE-2019-5820",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702910"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5820"
},
{
"category": "external",
"summary": "RHBZ#1702910",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702910"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5820"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5821",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702911"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5821"
},
{
"category": "external",
"summary": "RHBZ#1702911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5821",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5821"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5822",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702912"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CORS bypass in download manager",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5822"
},
{
"category": "external",
"summary": "RHBZ#1702912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5822"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: CORS bypass in download manager"
},
{
"cve": "CVE-2019-5823",
"discovery_date": "2019-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702913"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Forced navigation from service worker",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5823"
},
{
"category": "external",
"summary": "RHBZ#1702913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5823",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5823"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Forced navigation from service worker"
},
{
"cve": "CVE-2019-5825",
"discovery_date": "2019-05-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1707247"
}
],
"notes": [
{
"category": "description",
"text": "Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out-of-bounds write in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5825"
},
{
"category": "external",
"summary": "RHBZ#1707247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5825",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5825"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2019-04-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-06-08T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Out-of-bounds write in V8"
},
{
"cve": "CVE-2019-5826",
"discovery_date": "2019-05-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1707248"
}
],
"notes": [
{
"category": "description",
"text": "Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use-after-free in IndexedDB",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5826"
},
{
"category": "external",
"summary": "RHBZ#1707248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5826",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5826"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html"
}
],
"release_date": "2019-04-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use-after-free in IndexedDB"
},
{
"cve": "CVE-2020-6503",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2020-06-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844476"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Inappropriate implementation in accessibility",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6503"
},
{
"category": "external",
"summary": "RHBZ#1844476",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844476"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6503",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6503"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Inappropriate implementation in accessibility"
},
{
"cve": "CVE-2020-6504",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2020-06-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844472"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Insufficient policy enforcement in notifications",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6504"
},
{
"category": "external",
"summary": "RHBZ#1844472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6504",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6504"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
"url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
}
],
"release_date": "2019-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-07T17:06:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1021"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: Insufficient policy enforcement in notifications"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.