A vulnerablity has been found in Chromium and Google Chrome that could allow a remote attacker to execute arbitrary code.
| Package | www-client/chromium on all architectures | 
|---|---|
| Affected versions | < 84.0.4147.135 | 
| Unaffected versions | >= 84.0.4147.135 | 
| Package | www-client/google-chrome on all architectures | 
|---|---|
| Affected versions | < 84.0.4147.135 | 
| Unaffected versions | >= 84.0.4147.135 | 
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
Google Chrome is one fast, simple, and secure browser for all your devices.
A buffer overflow has been discovered in Chromium and Google Chrome’s SwiftShader component.
A remote attacker, by enticing a user to visit a specially crafted website, could execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-84.0.4147.135"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-84.0.4147.135"
      Release date
      
      August 25, 2020
    
      Latest revision
      
      August 25, 2020: 1
    
      Severity
      
      normal
    
      Exploitable
      
      remote
    
Bugzilla entries