Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[ GLSA 201808-01 ] Chromium, Google Chrome
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index News & Announcements
View previous topic :: View next topic  
Author Message
GLSA
Advocate
Advocate


Joined: 12 May 2004
Posts: 2114

PostPosted: Wed Aug 22, 2018 9:26 pm    Post subject: [ GLSA 201808-01 ] Chromium, Google Chrome Reply with quote

Gentoo Linux Security Advisory

Title: Chromium, Google Chrome: Multiple vulnerabilities (GLSA 201808-01)
Severity: normal
Exploitable: remote
Date: 2018-08-22
Bug(s): #657376, #662436
ID: 201808-01

Synopsis

Multiple vulnerabilities have been found in Chromium and Google
Chrome, the worst of which allows remote attackers to escalate privileges.


Background

Chromium is an open-source browser project that aims to build a safer,
faster, and more stable way for all users to experience the web.
Google Chrome is one fast, simple, and secure browser for all your
devices.


Affected Packages

Package: www-client/chromium
Vulnerable: < 68.0.3440.75
Unaffected: >= 68.0.3440.75
Architectures: All supported architectures

Package: www-client/google-chrome
Vulnerable: < 68.0.3440.75
Unaffected: >= 68.0.3440.75
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Chromium and Google
Chrome. Please review the referenced CVE identifiers and Google Chrome
Releases for details.


Impact

A remote attacker could escalate privileges, cause a heap buffer
overflow, obtain sensitive information or spoof a URL.


Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:
Code:
# emerge --sync
      # emerge --ask --oneshot --verbose
      ">=www-client/chromium-68.0.3440.75"
   
All Google Chrome users should upgrade to the latest version:
Code:
# emerge --sync
      # emerge --ask --oneshot --verbose
      ">=www-client/google-chrome-68.0.3440.75"
   


References

CVE-2018-4117
CVE-2018-6044
CVE-2018-6150
CVE-2018-6151
CVE-2018-6152
CVE-2018-6153
CVE-2018-6154
CVE-2018-6155
CVE-2018-6156
CVE-2018-6157
CVE-2018-6158
CVE-2018-6159
CVE-2018-6160
CVE-2018-6161
CVE-2018-6162
CVE-2018-6163
CVE-2018-6164
CVE-2018-6165
CVE-2018-6166
CVE-2018-6167
CVE-2018-6168
CVE-2018-6169
CVE-2018-6170
CVE-2018-6171
CVE-2018-6172
CVE-2018-6173
CVE-2018-6174
CVE-2018-6175
CVE-2018-6176
CVE-2018-6177
CVE-2018-6178
CVE-2018-6179
CVE-2108-6150

Google Chrome 68.0.3440.75 release announcement


Last edited by GLSA on Thu Aug 23, 2018 4:17 am; edited 1 time in total
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index News & Announcements All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum