View previous topic :: View next topic |
Author |
Message |
GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Wed Aug 22, 2018 9:26 pm Post subject: [ GLSA 201808-01 ] Chromium, Google Chrome |
|
|
Gentoo Linux Security Advisory
Title: Chromium, Google Chrome: Multiple vulnerabilities (GLSA 201808-01)
Severity: normal
Exploitable: remote
Date: 2018-08-22
Bug(s): #657376, #662436
ID: 201808-01
Synopsis
Multiple vulnerabilities have been found in Chromium and Google
Chrome, the worst of which allows remote attackers to escalate privileges.
Background
Chromium is an open-source browser project that aims to build a safer,
faster, and more stable way for all users to experience the web.
Google Chrome is one fast, simple, and secure browser for all your
devices.
Affected Packages
Package: www-client/chromium
Vulnerable: < 68.0.3440.75
Unaffected: >= 68.0.3440.75
Architectures: All supported architectures
Package: www-client/google-chrome
Vulnerable: < 68.0.3440.75
Unaffected: >= 68.0.3440.75
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in Chromium and Google
Chrome. Please review the referenced CVE identifiers and Google Chrome
Releases for details.
Impact
A remote attacker could escalate privileges, cause a heap buffer
overflow, obtain sensitive information or spoof a URL.
Workaround
There is no known workaround at this time.
Resolution
All Chromium users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-68.0.3440.75"
| All Google Chrome users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/google-chrome-68.0.3440.75"
|
References
CVE-2018-4117
CVE-2018-6044
CVE-2018-6150
CVE-2018-6151
CVE-2018-6152
CVE-2018-6153
CVE-2018-6154
CVE-2018-6155
CVE-2018-6156
CVE-2018-6157
CVE-2018-6158
CVE-2018-6159
CVE-2018-6160
CVE-2018-6161
CVE-2018-6162
CVE-2018-6163
CVE-2018-6164
CVE-2018-6165
CVE-2018-6166
CVE-2018-6167
CVE-2018-6168
CVE-2018-6169
CVE-2018-6170
CVE-2018-6171
CVE-2018-6172
CVE-2018-6173
CVE-2018-6174
CVE-2018-6175
CVE-2018-6176
CVE-2018-6177
CVE-2018-6178
CVE-2018-6179
CVE-2108-6150
Google Chrome 68.0.3440.75 release announcement
Last edited by GLSA on Thu Aug 23, 2018 4:17 am; edited 1 time in total |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|