chromium is vulnerable to authorization bypass. The library does not properly handle the confusable characters in Omnibox in Google Chrome, allowing an attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
www.securityfocus.com/bid/106767
access.redhat.com/errata/RHSA-2019:0309
chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html
crbug.com/863663
lists.fedoraproject.org/archives/list/[email protected]/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
lists.fedoraproject.org/archives/list/[email protected]/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/
security-tracker.debian.org/tracker/CVE-2019-5776
www.debian.org/security/2019/dsa-4395