Chromium: Multiple vulnerabilities — GLSA 201903-23

Multiple vulnerabilities have been found in Chromium, the worst of which could result in the remote execution of code.

Affected packages

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Description

Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details.

Impact

Please review the referenced CVE identifiers and Google Chrome Releases for details.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-73.0.3683.75"
 

References

• CVE-2018-17479
• CVE-2019-5786
• CVE-2019-5786
• CVE-2019-5787
• CVE-2019-5788
• CVE-2019-5789
• CVE-2019-5790
• CVE-2019-5791
• CVE-2019-5792
• CVE-2019-5793
• CVE-2019-5794
• CVE-2019-5795
• CVE-2019-5796
• CVE-2019-5797
• CVE-2019-5798
• CVE-2019-5799
• CVE-2019-5800
• CVE-2019-5801
• CVE-2019-5802
• CVE-2019-5803
• CVE-2019-5804

Release date
March 28, 2019

Latest revision
March 28, 2019: 1

Severity
high

Exploitable
remote

Bugzilla entries

• 671550
• 677066
• 679530
• 680242