Chromium: Multiple vulnerabilities — GLSA 201704-02

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Affected Packages

www-client/chromium on all architectures
Affected versions < 57.0.2987.133
Unaffected versions >= 57.0.2987.133

Background

Chromium is the open-source web browser project behind Google Chrome

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-57.0.2987.133"
 

References

Release Date
April 10, 2017

Latest Revision
April 14, 2017: 2

Severity
normal

Exploitable
remote

Bugzilla entries