Chromium: Multiple vulnerabilities — GLSA 201704-02

Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Affected packages

Background

Chromium is the open-source web browser project behind Google Chrome

Description

Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-57.0.2987.133"
 

References

• CVE-2017-5030
• CVE-2017-5031
• CVE-2017-5032
• CVE-2017-5033
• CVE-2017-5034
• CVE-2017-5035
• CVE-2017-5036
• CVE-2017-5037
• CVE-2017-5038
• CVE-2017-5039
• CVE-2017-5040
• CVE-2017-5041
• CVE-2017-5042
• CVE-2017-5043
• CVE-2017-5044
• CVE-2017-5045
• CVE-2017-5046
• CVE-2017-5052
• CVE-2017-5053
• CVE-2017-5054
• CVE-2017-5055
• CVE-2017-5056

Release date
April 10, 2017

Latest revision
April 14, 2017: 2

Severity
normal

Exploitable
remote

Bugzilla entries

• 612190
• 614276