[ GLSA 201412-13 ] Chromium: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Chromium: Multiple vulnerabilities (GLSA 201412-13)
Severity: normal
Exploitable: remote
Date: December 13, 2014
Bug(s): #524764, #529858
ID: 201412-13

Synopsis

Multiple vulnerabilities have been found in Chromium, the worst of
which can allow remote attackers to execute arbitrary code.


Background

Chromium is an open-source web browser project.

Affected Packages

Package: www-client/chromium
Vulnerable: < 39.0.2171.65
Unaffected: >= 39.0.2171.65
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Chromium. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker may be able to execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version: