Summary
The remote host is missing updates announced in
advisory GLSA 201012-01.
Solution
All Chromium users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-client/chromium-8.0.552.224'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201012-01 http://bugs.gentoo.org/show_bug.cgi?id=325451
http://bugs.gentoo.org/show_bug.cgi?id=326717
http://bugs.gentoo.org/show_bug.cgi?id=330003
http://bugs.gentoo.org/show_bug.cgi?id=333559
http://bugs.gentoo.org/show_bug.cgi?id=335750
http://bugs.gentoo.org/show_bug.cgi?id=338204
http://bugs.gentoo.org/show_bug.cgi?id=341797
http://bugs.gentoo.org/show_bug.cgi?id=344201
http://bugs.gentoo.org/show_bug.cgi?id=347625
http://bugs.gentoo.org/show_bug.cgi?id=348651
http://googlechromereleases.blogspot.com/2010/06/stable-channel-update_24.html http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_17.html http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html
Insight
Multiple vulnerabilities have been reported in Chromium, some of which may allow user-assisted execution of arbitrary code.
Severity
Classification
-
CVE CVE-2010-4574, CVE-2010-4575, CVE-2010-4576, CVE-2010-4577, CVE-2010-4578 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities