[ GLSA 201610-09 ] Chromium

[GLSA]

Gentoo Linux Security Advisory

Title: Chromium: Multiple vulnerabilities (GLSA 201610-09)
Severity: normal
Exploitable: remote
Date: October 29, 2016
Bug(s): #589278, #590420, #592630, #593708, #595614, #597016
ID: 201610-09

Synopsis

Multiple vulnerabilities have been found in the Chromium web
browser, the worst of which allows remote attackers to execute arbitrary
code.


Background

Chromium is an open-source browser project that aims to build a safer,
faster, and more stable way for all users to experience the web.


Affected Packages

Package: www-client/chromium
Vulnerable: < 54.0.2840.59
Unaffected: >= 54.0.2840.59
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in the Chromium web
browser. Please review the CVE identifiers referenced below for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, obtain
sensitive information, or bypass security restrictions.


Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version: