A vulnerablity has been found in Chromium and Google Chrome that could allow a remote attacker to execute arbitrary code.
Package | www-client/chromium on all architectures |
---|---|
Affected versions | < 84.0.4147.135 |
Unaffected versions | >= 84.0.4147.135 |
Package | www-client/google-chrome on all architectures |
---|---|
Affected versions | < 84.0.4147.135 |
Unaffected versions | >= 84.0.4147.135 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
Google Chrome is one fast, simple, and secure browser for all your devices.
A buffer overflow has been discovered in Chromium and Google Chrome’s SwiftShader component.
A remote attacker, by enticing a user to visit a specially crafted website, could execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-84.0.4147.135"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-84.0.4147.135"
Release date
August 25, 2020
Latest revision
August 25, 2020: 1
Severity
normal
Exploitable
remote
Bugzilla entries