portage-ng / portage / www-client / chromium / 151.0.7922.169-r1
portage-ng glsa
90 advisories reference www-client/chromium · none place version 151.0.7922.169-r1 in a vulnerable range
▸ GLSA 202609-02 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities this version unaffected high remote 2026-09-12

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi.

Announced
2026-09-12
Revised
2026-09-12
Access
remote
Bugs
#960254 #960556 #960851 #962288 #962717 #963346 #965344
Advisory
https://security.gentoo.org/glsa/202609-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 142.0.7444.134>= 142.0.7444.134
www-client/google-chrome*< 142.0.7444.59>= 142.0.7444.59
www-client/microsoft-edge*< 142.0.3595.53>= 142.0.3595.53
www-client/opera*< 126.0.5744.0>= 126.0.5744.0
www-client/vivaldi*< 7.7.3851.48>= 7.7.3851.48

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-142.0.7444.134"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-142.0.7444.59"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-142.0.3595.53"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-126.0.5744.0"

All Vivaldi users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.7.3851.48"

References

▸ GLSA 202609-01 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities this version unaffected high remote 2026-09-01

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.

Announced
2026-09-01
Revised
2026-09-01
Access
remote
Bugs
#955099 #955603 #956400 #956774 #957076 #957812 #958374 #959112 #959355
Advisory
https://security.gentoo.org/glsa/202609-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 138.0.7204.92>= 138.0.7204.92
www-client/google-chrome*< 138.0.7204.92>= 138.0.7204.92
www-client/microsoft-edge*< 138.0.3351.65>= 138.0.3351.65
www-client/opera*< 122.0.5643.17>= 122.0.5643.17
www-client/vivaldi*< 7.5.3735.44>= 7.5.3735.44

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-138.0.7204.92"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-138.0.7204.92"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-138.0.3351.65"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-122.0.5643.17"

All Vivaldi users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.5.3735.44"

References

▸ GLSA 202608-34 Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities this version unaffected high remote 2026-08-31

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.

Announced
2026-08-31
Revised
2026-08-31
Access
remote
Bugs
#945839 #946253 #948596 #949327 #949698 #949956 #953069 #953456 #953897
Advisory
https://security.gentoo.org/glsa/202608-34

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 135.0.7049.95>= 135.0.7049.95
www-client/google-chrome*< 135.0.7049.95>= 135.0.7049.95
www-client/microsoft-edge*< 135.0.3179.85>= 135.0.3179.85
www-client/opera*< 120.0.5543.8>= 120.0.5543.8

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-135.0.7049.95"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-135.0.7049.95"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-135.0.3179.85"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-120.0.5543.8"

References

▸ GLSA 202608-31 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities this version unaffected high remote 2026-08-27

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.

Announced
2026-08-27
Revised
2026-08-27
Access
remote
Bugs
#970044 #970045 #970311 #970511 #970908
Advisory
https://security.gentoo.org/glsa/202608-31

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 145.0.7632.159>= 145.0.7632.159
www-client/google-chrome*< 145.0.7632.159>= 145.0.7632.159
www-client/microsoft-edge*< 145.0.3800.97>= 145.0.3800.97
www-client/opera*< 130.0.5846.0>= 130.0.5846.0
www-client/vivaldi*< 7.8.3925.76>= 7.8.3925.76

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-145.0.7632.159"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-145.0.7632.159"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-145.0.3800.97"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-130.0.5846.0"

All Vivaldi users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.8.3925.76"

References

▸ GLSA 202608-29 Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities this version unaffected high remote 2026-08-27

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.

Announced
2026-08-27
Revised
2026-08-27
Access
remote
Bugs
#939217 #939451 #939801 #940208 #940637 #941186 #941989 #944072
Advisory
https://security.gentoo.org/glsa/202608-29

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 131.0.6778.85>= 131.0.6778.85
www-client/google-chrome*< 131.0.6778.85>= 131.0.6778.85
www-client/microsoft-edge*< 131.0.2903.63>= 131.0.2903.63
www-client/opera*< 116.0.5366.21>= 116.0.5366.21

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-131.0.6778.85"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-131.0.6778.85"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-131.0.2903.63"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-116.0.5366.21"

References

▸ GLSA 202608-28 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities this version unaffected high remote 2026-08-27

Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge. Opera.

Announced
2026-08-27
Revised
2026-08-27
Access
remote
Bugs
#931653 #931897 #932394 #934536 #934959 #936611 #937510 #938295
Advisory
https://security.gentoo.org/glsa/202608-28

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 128.0.6613.84>= 128.0.6613.84
www-client/google-chrome*< 128.0.6613.84>= 128.0.6613.84
www-client/microsoft-edge*< 128.0.2739.42>= 128.0.2739.42
www-client/opera*< 114.0.5282.21>= 114.0.5282.21

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-128.0.6613.84"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-128.0.6613.84"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-128.0.2739.42"

All Opera users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-114.0.5282.21"

References

▸ GLSA 202511-04 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities this version unaffected high local and remote 2025-11-24

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Announced
2025-11-24
Revised
2025-11-24
Access
local and remote
Bugs
#961477 #961834 #962051 #963024 #963638 #963959 #964335
Advisory
https://security.gentoo.org/glsa/202511-04

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 141.0.7390.107>= 141.0.7390.107
www-client/google-chrome*< 141.0.7390.107>= 141.0.7390.107
www-client/microsoft-edge*< 141.0.3537.71>= 141.0.3537.71
www-client/opera*< 122.0.5643.142>= 122.0.5643.142

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

ll Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-141.0.7390.107"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-141.0.7390.107"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-141.0.3537.71 "

All Oprea users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-122.0.5643.142"

References

▸ GLSA 202507-07 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities this version unaffected high local and remote 2025-07-08

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Announced
2025-07-08
Revised
2025-07-08
Access
local and remote
Bugs
#923966 #942503 #943403 #946723 #947700 #948135 #948983 #951155 #951688
Advisory
https://security.gentoo.org/glsa/202507-07

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 134.0.6998.117>= 134.0.6998.117
www-client/google-chrome*< 134.0.6998.117>= 134.0.6998.117
www-client/microsoft-edge*< 134.0.3124.83>= 134.0.3124.83
www-client/opera*< 119.0.5497.12>= 119.0.5497.12

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-134.0.6998.117"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-134.0.6998.117"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-134.0.3124.83"

All Oprea users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-119.0.5497.12"

References

▸ GLSA 202412-05 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities this version unaffected high remote 2024-12-07

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Announced
2024-12-07
Revised
2025-03-28 (revision 3)
Access
remote
Bugs
#924450 #925161 #925666 #926230 #926869 #927312 #927928 #928462 #929112 #930124 #930647 #930994 #931548
Advisory
https://security.gentoo.org/glsa/202412-05

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 124.0.6367.155>= 124.0.6367.155
www-client/google-chrome*< 124.0.6367.155>= 124.0.6367.155
www-client/microsoft-edge*< 124.0.2478.97>= 124.0.2478.97
www-client/opera*< 110.0.5130.35>= 110.0.5130.35

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-124.0.6367.155"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-124.0.6367.155 "

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-124.0.2478.97"

All Oprea users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-110.0.5130.35"

References

▸ GLSA 202402-23 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2024-02-19

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Announced
2024-02-19
Revised
2024-02-19
Access
remote
Bugs
#922062 #922340 #922903 #923370
Advisory
https://security.gentoo.org/glsa/202402-23

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 121.0.6167.139>= 121.0.6167.139
www-client/google-chrome*< 121.0.6167.139>= 121.0.6167.139
www-client/microsoft-edge*< 121.0.2277.83>= 121.0.2277.83

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-121.0.6167.139"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-121.0.6167.139"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-121.0.2277.83"

References

▸ GLSA 202401-34 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2024-01-31

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Announced
2024-01-31
Revised
2024-01-31
Access
remote
Bugs
#907999 #908471 #909283 #910522 #911675 #912364 #913016 #913710 #914350 #914871 #915137 #915560 #915961 #916252 #916620 #917021 #917357 #918882 #919321 #919802 #920442 #921337
Advisory
https://security.gentoo.org/glsa/202401-34

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 120.0.6099.109>= 120.0.6099.109
www-client/google-chrome*< 120.0.6099.109>= 120.0.6099.109
www-client/microsoft-edge*< 120.0.2210.133>= 120.0.2210.133

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-120.0.6099.109"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-120.0.6099.109"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-120.0.2210.133"

References

▸ GLSA 202309-17 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2023-09-30

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2023-09-30
Revised
2023-09-30
Access
remote
Bugs
#893660 #904252 #904394 #904560 #905297 #905620 #905883 #906586
Advisory
https://security.gentoo.org/glsa/202309-17

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 113.0.5672.126>= 113.0.5672.126
www-client/chromium-bin*< 113.0.5672.126—
www-client/google-chrome*< 113.0.5672.126>= 113.0.5672.126
www-client/microsoft-edge*< 113.0.1774.50>= 113.0.1774.50

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-113.0.5672.126"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-113.0.5672.126"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-113.0.1774.50"

Gentoo has discontinued support for www-client/chromium-bin. Users should unmerge it in favor of the above alternatives:

# emerge --ask --depclean --verbose "www-client/chromium-bin"

References

▸ GLSA 202305-10 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2023-05-03

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2023-05-03
Revised
2023-05-03
Access
remote
Bugs
#876855 #878825 #883031 #883697 #885851 #890726 #886479 #890728 #891501 #891503
Advisory
https://security.gentoo.org/glsa/202305-10

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 109.0.5414.74-r1>= 109.0.5414.74-r1
www-client/chromium-bin*< 109.0.5414.74>= 109.0.5414.74
www-client/google-chrome*< 109.0.5414.74>= 109.0.5414.74
www-client/microsoft-edge*< 109.0.1518.61>= 109.0.1518.61

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-109.0.5414.74-r1"

All Chromium binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-bin-109.0.5414.74"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-109.0.5414.74"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-109.0.1518.61"

References

▸ GLSA 202210-16 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2022-10-31

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2022-10-31
Revised
2022-10-31
Access
remote
Bugs
#873817 #874855 #876855 #873217
Advisory
https://security.gentoo.org/glsa/202210-16

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 106.0.5249.119>= 106.0.5249.119
www-client/chromium-bin*< 106.0.5249.119>= 106.0.5249.119
www-client/google-chrome*< 106.0.5249.119>= 106.0.5249.119
www-client/microsoft-edge*< 106.0.1370.37>= 106.0.1370.37

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, and Microsoft Edge. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-106.0.5249.119"

All Chromium binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-bin-106.0.5249.119"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-106.0.5249.119"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-106.0.1370.37"

References

▸ GLSA 202209-23 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2022-09-29

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2022-09-29
Revised
2022-09-29
Access
remote
Bugs
#868156 #868354 #872407 #870142
Advisory
https://security.gentoo.org/glsa/202209-23

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 105.0.5195.125>= 105.0.5195.125
www-client/chromium-bin*< 105.0.5195.125>= 105.0.5195.125
www-client/google-chrome*< 105.0.5195.125>= 105.0.5195.125
www-client/microsoft-edge*< 105.0.1343.42>= 105.0.1343.42

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-105.0.5195.125"

All Chromium binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-bin-105.0.5195.125"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-105.0.5195.125"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-105.0.1343.42"

References

▸ GLSA 202208-35 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities this version unaffected high remote 2022-08-21

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2022-08-21
Revised
2022-08-21
Access
remote
Bugs
#858104 #859442 #863512 #865501 #864723
Advisory
https://security.gentoo.org/glsa/202208-35

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 104.0.5112.101>= 104.0.5112.101
www-client/chromium-bin*< 104.0.5112.101>= 104.0.5112.101
www-client/google-chrome*< 104.0.5112.101>= 104.0.5112.101
www-client/microsoft-edge*< 104.0.1293.63>= 104.0.1293.63

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-104.0.5112.101"

All Chromium binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-bin-104.0.5112.101"

All Google Chrome users should upgrade to tha latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-104.0.5112.101"

All Microsoft Edge users should upgrade to tha latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-104.0.1293.63"

References

▸ GLSA 202208-25 Chromium, Google Chrome, Microsoft Edge, QtWebEngine: Multiple Vulnerabilities this version unaffected high remote 2022-08-14

Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.

Announced
2022-08-14
Revised
2022-08-14
Access
remote
Bugs
#828519 #834477 #835397 #836011 #836381 #836777 #838049 #838433 #841371 #843728 #847370 #851003 #853643 #773040 #787950 #800181 #810781 #815397 #829161 #835761 #836830 #847613 #853229 #837497 #838682 #843035 #848864 #851009 #854372
Advisory
https://security.gentoo.org/glsa/202208-25

Affected packages

PackageArchVulnerableUnaffected
dev-qt/qtwebengine*< 5.15.5_p20220618>= 5.15.5_p20220618
www-client/chromium*< 103.0.5060.53>= 103.0.5060.53
www-client/google-chrome*< 103.0.5060.53>= 103.0.5060.53
www-client/microsoft-edge*< 101.0.1210.47>= 101.0.1210.47

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.

Description

Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-103.0.5060.53"

All Chromium binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-bin-103.0.5060.53"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-103.0.5060.53"

All Microsoft Edge users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-103.0.5060.53"

All QtWebEngine users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.5_p20220618"

References

▸ GLSA 202202-02 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high remote 2022-02-20

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2022-02-20
Revised
2022-02-20
Access
remote
Bugs
#832559 #833432
Advisory
https://security.gentoo.org/glsa/202202-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 98.0.4758.102>= 98.0.4758.102
www-client/google-chrome*< 98.0.4758.102>= 98.0.4758.102

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one, fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-98.0.4758.102"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/google-chrome-98.0.4758.102"

References

▸ GLSA 202201-02 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high remote 2022-01-31

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2022-01-31
Revised
2022-01-31
Access
remote
Bugs
#803167 #806223 #808715 #811348 #813035 #814221 #814617 #815673 #816984 #819054 #820689 #824274 #829190 #830642 #831624
Advisory
https://security.gentoo.org/glsa/202201-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 97.0.4692.99>= 97.0.4692.99
www-client/google-chrome*< 97.0.4692.99>= 97.0.4692.99

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one, fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-97.0.4692.99"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-97.0.4692.99"

References

▸ GLSA 202107-49 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high remote 2021-07-22

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2021-07-22
Revised
2021-07-22 (revision 2)
Access
remote
Bugs
#802540
Advisory
https://security.gentoo.org/glsa/202107-49

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 91.0.4472.164>= 91.0.4472.164
www-client/google-chrome*< 91.0.4472.164>= 91.0.4472.164

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in chromium, and google-chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-91.0.4472.164"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-91.0.4472.164"

References

▸ GLSA 202107-06 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high remote 2021-07-06

Multiple vulnerabillities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2021-07-06
Revised
2021-07-06
Access
remote
Bugs
#789420 #792084 #795204 #796338 #796521
Advisory
https://security.gentoo.org/glsa/202107-06

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 91.0.4472.114>= 91.0.4472.114
www-client/google-chrome*< 91.0.4472.114>= 91.0.4472.114

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could execute arbitrary code, escalate privileges, obtain sensitive information, spoof a URL or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-91.0.4472.114"

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-91.0.4472.114"

References

▸ GLSA 202104-08 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2021-04-30

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2021-04-30
Revised
2021-04-30
Access
local, remote
Bugs
#768459 #768831 #771012 #774015 #776181 #779493 #782802 #782970 #784554 #785889
Advisory
https://security.gentoo.org/glsa/202104-08

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 90.0.4430.93>= 90.0.4430.93
www-client/google-chrome*< 90.0.4430.93>= 90.0.4430.93

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-90.0.4430.93"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-90.0.4430.93"

References

▸ GLSA 202101-13 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2021-01-22

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2021-01-22
Revised
2021-01-22
Access
remote
Bugs
#766207
Advisory
https://security.gentoo.org/glsa/202101-13

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 88.0.4324.96>= 88.0.4324.96
www-client/google-chrome*< 88.0.4324.96>= 88.0.4324.96

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-88.0.4324.96"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-88.0.4324.96"

References

▸ GLSA 202101-05 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2021-01-10

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2021-01-10
Revised
2021-01-10
Access
remote
Bugs
#764251
Advisory
https://security.gentoo.org/glsa/202101-05

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 87.0.4280.141>= 87.0.4280.141
www-client/google-chrome*< 87.0.4280.141>= 87.0.4280.141

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-87.0.4280.141"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-87.0.4280.141"

References

▸ GLSA 202012-05 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-12-07

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-12-07
Revised
2020-12-07
Access
local, remote
Bugs
#755227 #758368
Advisory
https://security.gentoo.org/glsa/202012-05

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 87.0.4280.88>= 87.0.4280.88
www-client/google-chrome*< 87.0.4280.88>= 87.0.4280.88

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-87.0.4280.88"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-87.0.4280.88"

References

▸ GLSA 202011-16 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-11-16

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-11-16
Revised
2020-11-16
Access
local, remote
Bugs
#754093
Advisory
https://security.gentoo.org/glsa/202011-16

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 86.0.4240.198>= 86.0.4240.198
www-client/google-chrome*< 86.0.4240.198>= 86.0.4240.198

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-86.0.4240.198"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-86.0.4240.198"

References

▸ GLSA 202011-12 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-11-11

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-11-11
Revised
2020-11-11
Access
remote
Bugs
#750854 #752375 #753848
Advisory
https://security.gentoo.org/glsa/202011-12

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 86.0.4240.193>= 86.0.4240.193
www-client/google-chrome*< 86.0.4240.193>= 86.0.4240.193

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-86.0.4240.193"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-86.0.4240.193"

References

▸ GLSA 202010-01 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-10-17

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-10-17
Revised
2020-10-17
Access
local, remote
Bugs
#747013
Advisory
https://security.gentoo.org/glsa/202010-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 86.0.4240.75>= 86.0.4240.75
www-client/google-chrome*< 86.0.4240.75>= 86.0.4240.75

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-86.0.4240.75"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-86.0.4240.75"

References

▸ GLSA 202009-13 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-09-29

Multiple vulnerabilities have been found in Chromiun and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-09-29
Revised
2020-09-29
Access
remote
Bugs
#744007
Advisory
https://security.gentoo.org/glsa/202009-13

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 85.0.4183.121>= 85.0.4183.121
www-client/google-chrome*< 85.0.4183.121>= 85.0.4183.121

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-85.0.4183.121"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-85.0.4183.121"

References

▸ GLSA 202009-03 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-09-10

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-09-10
Revised
2020-09-10
Access
local, remote
Bugs
#741312
Advisory
https://security.gentoo.org/glsa/202009-03

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 85.0.4183.102>= 85.0.4183.102
www-client/google-chrome*< 85.0.4183.102>= 85.0.4183.102

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-85.0.4183.102"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-85.0.4183.102"

References

▸ GLSA 202008-11 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-08-26

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-08-26
Revised
2020-08-26
Access
local, remote
Bugs
#738998
Advisory
https://security.gentoo.org/glsa/202008-11

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 85.0.4183.83>= 85.0.4183.83
www-client/google-chrome*< 85.0.4183.83>= 85.0.4183.83

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-85.0.4183.83"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-85.0.4183.83"

References

▸ GLSA 202008-10 Chromium, Google Chrome: Heap buffer overflow this version unaffected normal remote 2020-08-25

A vulnerablity has been found in Chromium and Google Chrome that could allow a remote attacker to execute arbitrary code.

Announced
2020-08-25
Revised
2020-08-25
Access
remote
Bugs
#737942
Advisory
https://security.gentoo.org/glsa/202008-10

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 84.0.4147.135>= 84.0.4147.135
www-client/google-chrome*< 84.0.4147.135>= 84.0.4147.135

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

A buffer overflow has been discovered in Chromium and Google Chrome’s SwiftShader component.

Impact

A remote attacker, by enticing a user to visit a specially crafted website, could execute arbitrary code with the privileges of the process.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-84.0.4147.135"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-84.0.4147.135"

References

▸ GLSA 202008-07 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-08-12

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-08-12
Revised
2020-08-12
Access
remote
Bugs
#736659
Advisory
https://security.gentoo.org/glsa/202008-07

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 84.0.4147.125>= 84.0.4147.125
www-client/google-chrome*< 84.0.4147.125>= 84.0.4147.125

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-84.0.4147.125"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-84.0.4147.125"

References

▸ GLSA 202007-59 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-07-29

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-07-29
Revised
2020-07-29
Access
remote
Bugs
#734150
Advisory
https://security.gentoo.org/glsa/202007-59

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 84.0.4147.105>= 84.0.4147.105
www-client/google-chrome*< 84.0.4147.105>= 84.0.4147.105

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-84.0.4147.105"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-84.0.4147.105"

References

▸ GLSA 202007-08 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-07-26

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-07-26
Revised
2020-07-26
Access
remote
Bugs
#728418 #729310 #732588
Advisory
https://security.gentoo.org/glsa/202007-08

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 84.0.4147.89>= 84.0.4147.89
www-client/google-chrome*< 84.0.4147.89>= 84.0.4147.89

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-84.0.4147.89"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-84.0.4147.89"

References

▸ GLSA 202006-02 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-06-10

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-06-10
Revised
2020-06-13 (revision 3)
Access
remote
Bugs
#724008
Advisory
https://security.gentoo.org/glsa/202006-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 83.0.4103.97>= 83.0.4103.97
www-client/google-chrome*< 83.0.4103.97>= 83.0.4103.97

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-83.0.4103.97"

All google-chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-83.0.4103.97"

References

▸ GLSA 202005-13 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-05-14

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2020-05-14
Revised
2020-05-14
Access
remote
Bugs
#719902 #721310
Advisory
https://security.gentoo.org/glsa/202005-13

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 81.0.4044.138>= 81.0.4044.138
www-client/google-chrome*< 81.0.4044.138>= 81.0.4044.138

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-81.0.4044.138"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-81.0.4044.138"

References

▸ GLSA 202004-12 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2020-04-23

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2020-04-23
Revised
2020-04-23
Access
local, remote
Bugs
#717652 #718826
Advisory
https://security.gentoo.org/glsa/202004-12

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 81.0.4044.122>= 81.0.4044.122
www-client/google-chrome*< 81.0.4044.122>= 81.0.4044.122

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could entice a user to open a specially crafted HTML or multimedia file using Chromium or Google Chrome, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-81.0.4044.122"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-81.0.4044.122"

References

▸ GLSA 202004-09 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-04-10

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2020-04-10
Revised
2020-04-10
Access
remote
Bugs
#715720 #716612
Advisory
https://security.gentoo.org/glsa/202004-09

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 81.0.4044.92>= 81.0.4044.92
www-client/google-chrome*< 81.0.4044.92>= 81.0.4044.92

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could entice a user to open a specially crafted HTML or multimedia file using Chromium or Google Chrome, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-81.0.4044.92"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-81.0.4044.92"

References

▸ GLSA 202003-53 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2020-03-25

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2020-03-25
Revised
2020-03-25
Access
remote
Bugs
#713282
Advisory
https://security.gentoo.org/glsa/202003-53

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 80.0.3987.149>= 80.0.3987.149
www-client/google-chrome*< 80.0.3987.149>= 80.0.3987.149

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could entice a user to open a specially crafted HTML or multimedia file using Chromium or Google Chrome, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-80.0.3987.149"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-80.0.3987.149"

References

▸ GLSA 202003-08 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high local, remote 2020-03-13

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2020-03-13
Revised
2020-03-13
Access
local, remote
Bugs
#699676 #700588 #702498 #703286 #704960 #705638 #708322 #710760 #711570
Advisory
https://security.gentoo.org/glsa/202003-08

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 80.0.3987.132>= 80.0.3987.132
www-client/google-chrome*< 80.0.3987.132>= 80.0.3987.132

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could execute arbitrary code, escalate privileges, obtain sensitive information, spoof an URL or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-80.0.3987.132"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-80.0.3987.132"

References

▸ GLSA 201911-06 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2019-11-25

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.

Announced
2019-11-25
Revised
2019-11-25
Access
remote
Bugs
#692916 #694002 #694954 #697506 #698398 #699068
Advisory
https://security.gentoo.org/glsa/201911-06

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 78.0.3904.87>= 78.0.3904.87
www-client/google-chrome*< 78.0.3904.87>= 78.0.3904.87

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-78.0.3904.87"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-78.0.3904.87"

References

▸ GLSA 201908-18 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected high remote 2019-08-15

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code.

Announced
2019-08-15
Revised
2019-08-16 (revision 2)
Access
remote
Bugs
#672606 #684238 #684272 #687732 #688072 #689944 #691098 #691682
Advisory
https://security.gentoo.org/glsa/201908-18

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 76.0.3809.100>= 76.0.3809.100
www-client/google-chrome*< 76.0.3809.100>= 76.0.3809.100

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-76.0.3809.100"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-76.0.3809.100"

References

▸ GLSA 201903-23 Chromium: Multiple vulnerabilities this version unaffected high remote 2019-03-28

Multiple vulnerabilities have been found in Chromium, the worst of which could result in the remote execution of code.

Announced
2019-03-28
Revised
2019-03-28
Access
remote
Bugs
#671550 #677066 #679530 #680242
Advisory
https://security.gentoo.org/glsa/201903-23

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 73.0.3683.75>= 73.0.3683.75

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

Please review the referenced CVE identifiers and Google Chrome Releases for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-73.0.3683.75"

References

▸ GLSA 201811-10 Chromium: Multiple vulnerabilities this version unaffected normal remote 2018-11-23

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which allows remote attackers to execute arbitrary code.

Announced
2018-11-23
Revised
2018-11-23
Access
remote
Bugs
#665340 #666502 #668986
Advisory
https://security.gentoo.org/glsa/201811-10

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 70.0.3538.67>= 70.0.3538.67

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could execute arbitrary code, escalate privileges, cause a heap buffer overflow, obtain sensitive information, or spoof a URL.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-70.0.3538.67"

References

▸ GLSA 201808-01 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2018-08-22

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which allows remote attackers to escalate privileges.

Announced
2018-08-22
Revised
2018-08-22 (revision 2)
Access
remote
Bugs
#657376 #662436
Advisory
https://security.gentoo.org/glsa/201808-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 68.0.3440.75>= 68.0.3440.75
www-client/google-chrome*< 68.0.3440.75>= 68.0.3440.75

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could escalate privileges, cause a heap buffer overflow, obtain sensitive information or spoof a URL.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-68.0.3440.75"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-68.0.3440.75"

References

▸ GLSA 201806-06 Chromium, Google Chrome: User-assisted execution of arbitrary code this version unaffected normal remote 2018-06-20

A vulnerablity has been found in Chromium and Chrome that could allow a remote attacker to execute arbitrary code.

Announced
2018-06-20
Revised
2018-06-20
Access
remote
Bugs
#658040
Advisory
https://security.gentoo.org/glsa/201806-06

Affected packages

PackageArchVulnerableUnaffected
www-client/chrome*< 67.0.3396.87>= 67.0.3396.87
www-client/chromium*< 67.0.3396.87>= 67.0.3396.87

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

An out of bounds flaw has discovered in Chromium and Chrome’s V8 component.

Impact

A remote attacker, by enticing a user to visit a specially crafted website, could execute arbitrary code with the privileges of the process

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-67.0.3396.87"

All Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chrome-67.0.3396.87"

References

▸ GLSA 201805-06 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2018-05-20

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in privilege escalation.

Announced
2018-05-20
Revised
2018-05-20
Access
local, remote
Bugs
#655720
Advisory
https://security.gentoo.org/glsa/201805-06

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 66.0.3359.170>= 66.0.3359.170
www-client/google-chrome*< 66.0.3359.170>= 66.0.3359.170

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker, by enticing a user to install malicious extensions, could possibly escalate privileges, cause a Denial of Service condition, or have other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-66.0.3359.170"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-66.0.3359.170"

References

▸ GLSA 201805-03 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2018-05-02

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2018-05-02
Revised
2018-05-02
Access
remote
Bugs
#654384
Advisory
https://security.gentoo.org/glsa/201805-03

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 66.0.3359.139>= 66.0.3359.139
www-client/google-chrome*< 66.0.3359.139>= 66.0.3359.139

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-66.0.3359.139"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-66.0.3359.139"

References

▸ GLSA 201804-22 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2018-04-24

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2018-04-24
Revised
2018-04-24
Access
remote
Bugs
#653696
Advisory
https://security.gentoo.org/glsa/201804-22

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 66.0.3359.117>= 66.0.3359.117
www-client/google-chrome*< 66.0.3359.117>= 66.0.3359.117

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, bypass content security controls, or conduct URL spoofing.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-66.0.3359.117"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-66.0.3359.117"

References

▸ GLSA 201803-05 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2018-03-13

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2018-03-13
Revised
2018-03-13 (revision 2)
Access
local, remote
Bugs
#649800
Advisory
https://security.gentoo.org/glsa/201803-05

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 65.0.3325.146>= 65.0.3325.146
www-client/google-chrome*< 65.0.3325.146>= 65.0.3325.146

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, bypass content security controls, or conduct URL spoofing.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-65.0.3325.146"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-65.0.3325.146"

References

▸ GLSA 201802-02 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2018-02-19

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2018-02-19
Revised
2018-02-19
Access
remote
Bugs
#647124 #647636
Advisory
https://security.gentoo.org/glsa/201802-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 64.0.3282.167>= 64.0.3282.167
www-client/google-chrome*< 64.0.3282.167>= 64.0.3282.167

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, bypass content security controls, or conduct URL spoofing.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-64.0.3282.167"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-64.0.3282.167"

References

▸ GLSA 201801-03 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal local, remote 2018-01-07

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2018-01-07
Revised
2018-01-07
Access
local, remote
Bugs
#640334 #641376
Advisory
https://security.gentoo.org/glsa/201801-03

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 63.0.3239.108>= 63.0.3239.108
www-client/google-chrome*< 63.0.3239.108>= 63.0.3239.108

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, bypass content security controls, or conduct URL spoofing.

Workaround

There are no known workarounds at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-63.0.3239.108"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-63.0.3239.108"

References

▸ GLSA 201711-02 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2017-11-10

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2017-11-10
Revised
2017-11-10 (revision 2)
Access
remote
Bugs
#635556 #636800
Advisory
https://security.gentoo.org/glsa/201711-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 62.0.3202.89>= 62.0.3202.89
www-client/google-chrome*< 62.0.3202.89>= 62.0.3202.89

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifier and Google Chrome Releases for details.

Impact

A remote attack may be able to execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-62.0.3202.89"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-62.0.3202.89"

References

▸ GLSA 201710-24 Chromium, Google Chrome: Multiple vulnerabilities this version unaffected normal remote 2017-10-23

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.

Announced
2017-10-23
Revised
2017-10-23
Access
remote
Bugs
#634664
Advisory
https://security.gentoo.org/glsa/201710-24

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 62.0.3202.62>= 62.0.3202.62
www-client/google-chrome*< 62.0.3202.62>= 62.0.3202.62

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, bypass content security controls, or conduct URL spoofing.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-62.0.3202.62"

All Google Chrome users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-62.0.3202.62"

References

▸ GLSA 201709-25 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-09-25

Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.

Announced
2017-09-25
Revised
2017-09-25
Access
remote
Bugs
#631784
Advisory
https://security.gentoo.org/glsa/201709-25

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 61.0.3163.100>= 61.0.3163.100

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-61.0.3163.100"

References

▸ GLSA 201709-15 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-09-24

Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.

Announced
2017-09-24
Revised
2017-09-24
Access
remote
Bugs
#626382 #630068
Advisory
https://security.gentoo.org/glsa/201709-15

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 61.0.3163.79>= 61.0.3163.79

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, bypass security restrictions, or spoof content.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-61.0.3163.79"

References

▸ GLSA 201706-20 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-06-20

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2017-06-20
Revised
2017-06-20
Access
remote
Bugs
#617504 #620956 #621886
Advisory
https://security.gentoo.org/glsa/201706-20

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 59.0.3071.104>= 59.0.3071.104

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, bypass security restrictions or spoof content.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-59.0.3071.104"

References

▸ GLSA 201705-02 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-05-07

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2017-05-07
Revised
2017-05-07
Access
remote
Bugs
#616048
Advisory
https://security.gentoo.org/glsa/201705-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 58.0.3029.81>= 58.0.3029.81

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, bypass security restrictions or spoof content.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-58.0.3029.81"

References

▸ GLSA 201704-02 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-04-10

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2017-04-10
Revised
2017-04-14 (revision 2)
Access
remote
Bugs
#612190 #614276
Advisory
https://security.gentoo.org/glsa/201704-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 57.0.2987.133>= 57.0.2987.133

Background

Chromium is the open-source web browser project behind Google Chrome

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-57.0.2987.133"

References

▸ GLSA 201701-66 Chromium: Multiple vulnerabilities this version unaffected normal remote 2017-01-29

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2017-01-29
Revised
2017-01-29
Access
remote
Bugs
#607276
Advisory
https://security.gentoo.org/glsa/201701-66

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 56.0.2924.76>= 56.0.2924.76

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, bypass security restrictions, or perform cross-site scripting (XSS).

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-56.0.2924.76"

References

▸ GLSA 201612-11 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-12-05

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-12-05
Revised
2016-12-05
Access
remote
Bugs
#601486
Advisory
https://security.gentoo.org/glsa/201612-11

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 55.0.2883.75>= 55.0.2883.75

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-55.0.2883.75"

References

▸ GLSA 201611-16 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-11-22

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-11-22
Revised
2016-11-22 (revision 3)
Access
remote
Bugs
#599416
Advisory
https://security.gentoo.org/glsa/201611-16

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 54.0.2840.100>= 54.0.2840.100

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-54.0.2840.100"

References

▸ GLSA 201610-09 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-10-29

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-10-29
Revised
2016-10-29
Access
remote
Bugs
#589278 #590420 #592630 #593708 #595614 #597016
Advisory
https://security.gentoo.org/glsa/201610-09

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 54.0.2840.59>= 54.0.2840.59

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-54.0.2840.59"

References

▸ GLSA 201607-07 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-07-16

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-07-16
Revised
2016-07-16
Access
remote
Bugs
#584310 #586704
Advisory
https://security.gentoo.org/glsa/201607-07

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 51.0.2704.103>= 51.0.2704.103

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-51.0.2704.103"

References

▸ GLSA 201605-02 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-05-14

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-05-14
Revised
2016-05-14
Access
remote
Bugs
#578200 #579954 #581524 #582828
Advisory
https://security.gentoo.org/glsa/201605-02

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 50.0.2661.102>= 50.0.2661.102

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-50.0.2661.102"

References

▸ GLSA 201603-09 Chromium: Multiple vulnerabilities this version unaffected normal remote 2016-03-12

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Announced
2016-03-12
Revised
2016-03-12
Access
remote
Bugs
#555640 #559384 #561448 #563098 #565510 #567308 #567870 #568396 #572542 #574416 #575434 #576354 #576858
Advisory
https://security.gentoo.org/glsa/201603-09

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 49.0.2623.87>= 49.0.2623.87

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-49.0.2623.87"

References

▸ GLSA 201507-18 Chromium: Multiple vulnerabilities this version unaffected normal remote 2015-07-10

Multiple vulnerabilities have been found in Chromium allowing remote attackers to bypass security restrictions.

Announced
2015-07-10
Revised
2015-07-10
Access
remote
Bugs
#552904
Advisory
https://security.gentoo.org/glsa/201507-18

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 43.0.2357.130>= 43.0.2357.130

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-43.0.2357.130"

References

▸ GLSA 201506-04 Chromium: Multiple vulnerabilities this version unaffected normal remote 2015-06-23

Multiple vulnerabilities have been fixed in Chromium, the worst of which can cause arbitrary remote code execution.

Announced
2015-06-23
Revised
2015-06-23
Access
remote
Bugs
#545300 #546728 #548108 #549944
Advisory
https://security.gentoo.org/glsa/201506-04

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 43.0.2357.65>= 43.0.2357.65

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker can cause arbitrary remote code execution, Denial of Service or bypass of security mechanisms.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-43.0.2357.65"

References

▸ GLSA 201503-12 Chromium: Multiple vulnerabilities this version unaffected normal remote 2015-03-22

Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to cause Denial of Service or bypass security restrictions.

Announced
2015-03-22
Revised
2015-03-22
Access
remote
Bugs
#542090
Advisory
https://security.gentoo.org/glsa/201503-12

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 41.0.2272.76>= 41.0.2272.76

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to cause a Denial of Service condition, bypass security restrictions, or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-41.0.2272.76"

References

▸ GLSA 201502-13 Chromium: Multiple vulnerabilities this version unaffected normal remote 2015-02-17

Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to cause Denial of Service or gain escalated privileges.

Announced
2015-02-17
Revised
2015-02-17
Access
remote
Bugs
#537366 #539094
Advisory
https://security.gentoo.org/glsa/201502-13

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 40.0.2214.111>= 40.0.2214.111

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to cause a Denial of Service condition, gain privileges via a filesystem: URI, or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-40.0.2214.111"

References

▸ GLSA 201412-13 Chromium: Multiple vulnerabilities this version unaffected normal remote 2014-12-13

Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to execute arbitrary code.

Announced
2014-12-13
Revised
2014-12-13
Access
remote
Bugs
#524764 #529858
Advisory
https://security.gentoo.org/glsa/201412-13

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 39.0.2171.65>= 39.0.2171.65

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-39.0.2171.65"

References

▸ GLSA 201409-06 Chromium: Multiple vulnerabilities this version unaffected normal remote 2014-09-19

Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to cause Denial of Service.

Announced
2014-09-19
Revised
2014-09-19
Access
remote
Bugs
#522484
Advisory
https://security.gentoo.org/glsa/201409-06

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 37.0.2062.120>= 37.0.2062.120

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to cause a Denial of Service condition or possibly have other unspecified impact by leveraging improper handling of render-tree inconsistencies.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-37.0.2062.120"

References

▸ GLSA 201408-16 Chromium: Multiple vulnerabilities this version unaffected normal remote 2014-08-30

Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to execute arbitrary code.

Announced
2014-08-30
Revised
2014-08-30
Access
remote
Bugs
#504328 #504890 #507212 #508788 #510288 #510904 #512944 #517304 #519788 #521276
Advisory
https://security.gentoo.org/glsa/201408-16

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 37.0.2062.94>= 37.0.2062.94

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could conduct a number of attacks which include: cross site scripting attacks, bypassing of sandbox protection, potential execution of arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-37.0.2062.94"

References

▸ GLSA 201403-01 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2014-03-05

Multiple vulnerabilities have been reported in Chromium and V8, worst of which may allow execution of arbitrary code.

Announced
2014-03-05
Revised
2014-03-05
Access
remote
Bugs
#486742 #488148 #491128 #491326 #493364 #498168 #499502 #501948 #503372
Advisory
https://security.gentoo.org/glsa/201403-01

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.20.17.13—
www-client/chromium*< 33.0.1750.146>= 33.0.1750.146

Background

Chromium is an open-source web browser project. V8 is Google’s open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass security restrictions or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-33.0.1750.146"

Gentoo has discontinued support for separate V8 package. We recommend that users unmerge V8:

# emerge --unmerge "dev-lang/v8"

References

▸ GLSA 201309-16 Chromium, V8: Multiple vulnerabilities this version unaffected high remote 2013-09-24

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2013-09-24
Revised
2013-09-25 (revision 2)
Access
remote
Bugs
#442096 #444826 #445246 #446944 #451334 #453610 #458644 #460318 #460776 #463426 #470920 #472350 #476344 #479048 #481990
Advisory
https://security.gentoo.org/glsa/201309-16

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.18.5.14>= 3.18.5.14
www-client/chromium*< 29.0.1457.57>= 29.0.1457.57

Background

Chromium is an open-source web browser project. V8 is Google’s open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass security restrictions or have other, unspecified, impact.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-29.0.1457.57"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.18.5.14"

References

▸ GLSA 201210-07 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-10-21

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-10-21
Revised
2012-10-21
Access
remote
Bugs
#433551 #436234 #437664 #437984
Advisory
https://security.gentoo.org/glsa/201210-07

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 22.0.1229.94>= 22.0.1229.94

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, arbitrary file write, a Denial of Service condition, Cross-Site Scripting in SSL interstitial and various Universal Cross-Site Scripting attacks.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-22.0.1229.94"

References

▸ GLSA 201208-03 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-08-14

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-08-14
Revised
2012-08-14
Access
remote
Bugs
#423719 #426204 #429174
Advisory
https://security.gentoo.org/glsa/201208-03

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 21.0.1180.57>= 21.0.1180.57

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, disclosure of sensitive information, or other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-21.0.1180.57"

References

▸ GLSA 201205-04 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2012-05-27

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2012-05-27
Revised
2012-05-27
Access
remote
Bugs
#417321
Advisory
https://security.gentoo.org/glsa/201205-04

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.9.24.28>= 3.9.24.28
www-client/chromium*< 19.0.1084.52>= 19.0.1084.52

Background

Chromium is an open source web browser project. V8 is Google’s open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-19.0.1084.52"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.9.24.28"

References

▸ GLSA 201205-03 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2012-05-21

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2012-05-21
Revised
2012-05-21
Access
remote
Bugs
#416119
Advisory
https://security.gentoo.org/glsa/201205-03

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.9.24.21>= 3.9.24.21
www-client/chromium*< 19.0.1084.46>= 19.0.1084.46

Background

Chromium is an open source web browser project. V8 is Google’s open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-19.0.1084.46"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.9.24.21"

References

▸ GLSA 201205-01 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-05-15

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-05-15
Revised
2012-05-15
Access
remote
Bugs
#414199
Advisory
https://security.gentoo.org/glsa/201205-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 18.0.1025.168>= 18.0.1025.168

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-18.0.1025.168"

References

▸ GLSA 201204-03 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-04-10

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-04-10
Revised
2012-04-10
Access
remote
Bugs
#410963
Advisory
https://security.gentoo.org/glsa/201204-03

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 18.0.1025.151>= 18.0.1025.151

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or bypass of the same origin policy.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-18.0.1025.151"

References

▸ GLSA 201203-24 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2012-03-30

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2012-03-30
Revised
2012-03-30
Access
remote
Bugs
#410045
Advisory
https://security.gentoo.org/glsa/201203-24

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.8.9.16>= 3.8.9.16
www-client/chromium*< 18.0.1025.142>= 18.0.1025.142

Background

Chromium is an open source web browser project. V8 is Google's open source JavaScript engine. SPDY is an experimental networking protocol.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

The attacker could also entice a user to open a specially crafted web site using Chromium, possibly resulting in cross-site scripting (XSS), or an unspecified SPDY certificate checking error.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-18.0.1025.142"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.8.9.16"

References

▸ GLSA 201203-19 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-03-25

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-03-25
Revised
2012-03-25
Access
remote
Bugs
#406975 #407465 #407755 #409251
Advisory
https://security.gentoo.org/glsa/201203-19

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 17.0.963.83>= 17.0.963.83

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, Universal Cross-Site Scripting, or installation of an extension without user interaction.

A remote attacker could also entice a user to install a specially crafted extension that would interfere with browser-issued web requests.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-17.0.963.83"

References

▸ GLSA 201202-01 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-02-18

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-02-18
Revised
2012-02-18
Access
remote
Bugs
#402841 #404067
Advisory
https://security.gentoo.org/glsa/201202-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 17.0.963.56>= 17.0.963.56

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, information leak (clipboard contents), bypass of the Same Origin Policy, or escape from NativeClient's sandbox.

A remote attacker could also entice the user to perform a set of UI actions (drag and drop) to trigger an URL bar spoofing vulnerability.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-17.0.963.56"

References

▸ GLSA 201201-17 Chromium: Multiple vulnerabilities this version unaffected normal remote 2012-01-28

Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code.

Announced
2012-01-28
Revised
2012-01-28
Access
remote
Bugs
#400551
Advisory
https://security.gentoo.org/glsa/201201-17

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 16.0.912.77>= 16.0.912.77

Background

Chromium is an open source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted web site using Chromium, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-16.0.912.77"

References

▸ GLSA 201201-03 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2012-01-08

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2012-01-08
Revised
2012-01-08
Access
remote
Bugs
#394587 #397907
Advisory
https://security.gentoo.org/glsa/201201-03

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.6.6.11>= 3.6.6.11
www-client/chromium*< 16.0.912.75>= 16.0.912.75

Background

Chromium is an open source web browser project. V8 is Google's open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.

The attacker could also perform URL bar spoofing.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-16.0.912.75"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.6.6.11"

References

▸ GLSA 201111-05 Chromium, V8: Multiple vulnerabilities this version unaffected normal remote 2011-11-19

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code.

Announced
2011-11-19
Revised
2011-11-19
Access
remote
Bugs
#390113 #390779
Advisory
https://security.gentoo.org/glsa/201111-05

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.5.10.24>= 3.5.10.24
www-client/chromium*< 15.0.874.121>= 15.0.874.121

Background

Chromium is an open-source web browser project. V8 is Google's open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition. The attacker also could cause a Java applet to run without user confirmation.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-15.0.874.121"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.5.10.24"

References

▸ GLSA 201111-01 Chromium, V8: Multiple vulnerabilities this version unaffected high remote 2011-11-01

Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code and local root privilege escalation.

Announced
2011-11-01
Revised
2011-11-01
Access
remote
Bugs
#351525 #353626 #354121 #356933 #357963 #358581 #360399 #363629 #365125 #366335 #367013 #368649 #370481 #373451 #373469 #377475 #377629 #380311 #380897 #381713 #383251 #385649 #388461
Advisory
https://security.gentoo.org/glsa/201111-01

Affected packages

PackageArchVulnerableUnaffected
dev-lang/v8*< 3.5.10.22>= 3.5.10.22
www-client/chromium*< 15.0.874.102>= 15.0.874.102

Background

Chromium is an open-source web browser project. V8 is Google's open source JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details.

Impact

A local attacker could gain root privileges (CVE-2011-1444, fixed in chromium-11.0.696.57).

A context-dependent attacker could entice a user to open a specially crafted web site or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition. The attacker also could obtain cookies and other sensitive information, conduct man-in-the-middle attacks, perform address bar spoofing, bypass the same origin policy, perform Cross-Site Scripting attacks, or bypass pop-up blocks.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-15.0.874.102"

All V8 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/v8-3.5.10.22"

References

▸ GLSA 201012-01 Chromium: Multiple vulnerabilities this version unaffected normal remote 2010-12-17

Multiple vulnerabilities have been reported in Chromium, some of which may allow user-assisted execution of arbitrary code.

Announced
2010-12-17
Revised
2010-12-17
Access
remote
Bugs
#325451 #326717 #330003 #333559 #335750 #338204 #341797 #344201 #347625 #348651
Advisory
https://security.gentoo.org/glsa/201012-01

Affected packages

PackageArchVulnerableUnaffected
www-client/chromium*< 8.0.552.224>= 8.0.552.224

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities were found in Chromium. For further information please consult the release notes referenced below.

Impact

A remote attacker could trick a user to perform a set of UI actions that trigger a possibly exploitable crash, leading to execution of arbitrary code or a Denial of Service.

It was also possible for an attacker to entice a user to visit a specially-crafted web page that would trigger one of the vulnerabilities, leading to execution of arbitrary code within the confines of the sandbox, successful Cross-Site Scripting attacks, violation of the same-origin policy, successful website spoofing attacks, information leak, or a Denial of Service. An attacker could also trick a user to perform a set of UI actions that might result in a successful website spoofing attack.

Multiple bugs in the sandbox could result in a sandbox escape.

Multiple UI bugs could lead to information leak and successful website spoofing attacks.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/chromium-8.0.552.224"

References