- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202201-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Chromium, Google Chrome: Multiple vulnerabilities Date: January 31, 2022 Bugs: #803167, #806223, #808715, #811348, #813035, #814221, #814617, #815673, #816984, #819054, #820689, #824274, #829190, #830642, #831624 ID: 202201-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. Background ========= Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one, fast, simple, and secure browser for all your devices. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/google-chrome < 97.0.4692.99 >= 97.0.4692.99 2 www-client/chromium < 97.0.4692.99 >= 97.0.4692.99 Description ========== Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose >=www-client/chromium-97.0.4692.99 All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose >=www-client/google-chrome-97.0.4692.99 References ========= [ 1 ] CVE-2021-30593 https://nvd.nist.gov/vuln/detail/CVE-2021-30593 [ 2 ] CVE-2022-0292 https://nvd.nist.gov/vuln/detail/CVE-2022-0292 [ 3 ] CVE-2022-0118 https://nvd.nist.gov/vuln/detail/CVE-2022-0118 [ 4 ] CVE-2022-0112 https://nvd.nist.gov/vuln/detail/CVE-2022-0112 [ 5 ] CVE-2021-30625 https://nvd.nist.gov/vuln/detail/CVE-2021-30625 [ 6 ] CVE-2021-37975 https://nvd.nist.gov/vuln/detail/CVE-2021-37975 [ 7 ] CVE-2021-38014 https://nvd.nist.gov/vuln/detail/CVE-2021-38014 [ 8 ] CVE-2021-30606 https://nvd.nist.gov/vuln/detail/CVE-2021-30606 [ 9 ] CVE-2021-37989 https://nvd.nist.gov/vuln/detail/CVE-2021-37989 [ 10 ] CVE-2022-0296 https://nvd.nist.gov/vuln/detail/CVE-2022-0296 [ 11 ] CVE-2021-37981 https://nvd.nist.gov/vuln/detail/CVE-2021-37981 [ 12 ] CVE-2022-0310 https://nvd.nist.gov/vuln/detail/CVE-2022-0310 [ 13 ] CVE-2021-37963 https://nvd.nist.gov/vuln/detail/CVE-2021-37963 [ 14 ] CVE-2022-0309 https://nvd.nist.gov/vuln/detail/CVE-2022-0309 [ 15 ] CVE-2021-30584 https://nvd.nist.gov/vuln/detail/CVE-2021-30584 [ 16 ] CVE-2022-0289 https://nvd.nist.gov/vuln/detail/CVE-2022-0289 [ 17 ] CVE-2021-30611 https://nvd.nist.gov/vuln/detail/CVE-2021-30611 [ 18 ] CVE-2021-37965 https://nvd.nist.gov/vuln/detail/CVE-2021-37965 [ 19 ] CVE-2021-38003 https://nvd.nist.gov/vuln/detail/CVE-2021-38003 [ 20 ] CVE-2021-37968 https://nvd.nist.gov/vuln/detail/CVE-2021-37968 [ 21 ] CVE-2022-0305 https://nvd.nist.gov/vuln/detail/CVE-2022-0305 [ 22 ] CVE-2021-30598 https://nvd.nist.gov/vuln/detail/CVE-2021-30598 [ 23 ] CVE-2021-37973 https://nvd.nist.gov/vuln/detail/CVE-2021-37973 [ 24 ] CVE-2022-0295 https://nvd.nist.gov/vuln/detail/CVE-2022-0295 [ 25 ] CVE-2022-0304 https://nvd.nist.gov/vuln/detail/CVE-2022-0304 [ 26 ] CVE-2021-30622 https://nvd.nist.gov/vuln/detail/CVE-2021-30622 [ 27 ] CVE-2021-30591 https://nvd.nist.gov/vuln/detail/CVE-2021-30591 [ 28 ] CVE-2021-37967 https://nvd.nist.gov/vuln/detail/CVE-2021-37967 [ 29 ] CVE-2022-0109 https://nvd.nist.gov/vuln/detail/CVE-2022-0109 [ 30 ] CVE-2021-30609 https://nvd.nist.gov/vuln/detail/CVE-2021-30609 [ 31 ] CVE-2021-37984 https://nvd.nist.gov/vuln/detail/CVE-2021-37984 [ 32 ] CVE-2022-0297 https://nvd.nist.gov/vuln/detail/CVE-2022-0297 [ 33 ] CVE-2021-37959 https://nvd.nist.gov/vuln/detail/CVE-2021-37959 [ 34 ] CVE-2021-30613 https://nvd.nist.gov/vuln/detail/CVE-2021-30613 [ 35 ] CVE-2021-37976 https://nvd.nist.gov/vuln/detail/CVE-2021-37976 [ 36 ] CVE-2021-30603 https://nvd.nist.gov/vuln/detail/CVE-2021-30603 [ 37 ] CVE-2021-37970 https://nvd.nist.gov/vuln/detail/CVE-2021-37970 [ 38 ] CVE-2021-37983 https://nvd.nist.gov/vuln/detail/CVE-2021-37983 [ 39 ] CVE-2021-37992 https://nvd.nist.gov/vuln/detail/CVE-2021-37992 [ 40 ] CVE-2022-0290 https://nvd.nist.gov/vuln/detail/CVE-2022-0290 [ 41 ] CVE-2021-30587 https://nvd.nist.gov/vuln/detail/CVE-2021-30587 [ 42 ] CVE-2021-38016 https://nvd.nist.gov/vuln/detail/CVE-2021-38016 [ 43 ] CVE-2022-0302 https://nvd.nist.gov/vuln/detail/CVE-2022-0302 [ 44 ] CVE-2021-37962 https://nvd.nist.gov/vuln/detail/CVE-2021-37962 [ 45 ] CVE-2021-30599 https://nvd.nist.gov/vuln/detail/CVE-2021-30599 [ 46 ] CVE-2021-30607 https://nvd.nist.gov/vuln/detail/CVE-2021-30607 [ 47 ] CVE-2021-37998 https://nvd.nist.gov/vuln/detail/CVE-2021-37998 [ 48 ] CVE-2021-30602 https://nvd.nist.gov/vuln/detail/CVE-2021-30602 [ 49 ] CVE-2022-0114 https://nvd.nist.gov/vuln/detail/CVE-2022-0114 [ 50 ] CVE-2021-30610 https://nvd.nist.gov/vuln/detail/CVE-2021-30610 [ 51 ] CVE-2021-37990 https://nvd.nist.gov/vuln/detail/CVE-2021-37990 [ 52 ] CVE-2022-0293 https://nvd.nist.gov/vuln/detail/CVE-2022-0293 [ 53 ] CVE-2021-30627 https://nvd.nist.gov/vuln/detail/CVE-2021-30627 [ 54 ] CVE-2021-37994 https://nvd.nist.gov/vuln/detail/CVE-2021-37994 [ 55 ] CVE-2022-0303 https://nvd.nist.gov/vuln/detail/CVE-2022-0303 [ 56 ] CVE-2021-30626 https://nvd.nist.gov/vuln/detail/CVE-2021-30626 [ 57 ] CVE-2021-37988 https://nvd.nist.gov/vuln/detail/CVE-2021-37988 [ 58 ] CVE-2022-0311 https://nvd.nist.gov/vuln/detail/CVE-2022-0311 [ 59 ] CVE-2021-30586 https://nvd.nist.gov/vuln/detail/CVE-2021-30586 [ 60 ] CVE-2021-30624 https://nvd.nist.gov/vuln/detail/CVE-2021-30624 [ 61 ] CVE-2021-37991 https://nvd.nist.gov/vuln/detail/CVE-2021-37991 [ 62 ] CVE-2021-30594 https://nvd.nist.gov/vuln/detail/CVE-2021-30594 [ 63 ] CVE-2021-30616 https://nvd.nist.gov/vuln/detail/CVE-2021-30616 [ 64 ] CVE-2021-37986 https://nvd.nist.gov/vuln/detail/CVE-2021-37986 [ 65 ] CVE-2021-38012 https://nvd.nist.gov/vuln/detail/CVE-2021-38012 [ 66 ] CVE-2022-0298 https://nvd.nist.gov/vuln/detail/CVE-2022-0298 [ 67 ] CVE-2021-37978 https://nvd.nist.gov/vuln/detail/CVE-2021-37978 [ 68 ] CVE-2021-38001 https://nvd.nist.gov/vuln/detail/CVE-2021-38001 [ 69 ] CVE-2022-0110 https://nvd.nist.gov/vuln/detail/CVE-2022-0110 [ 70 ] CVE-2021-38011 https://nvd.nist.gov/vuln/detail/CVE-2021-38011 [ 71 ] CVE-2021-30583 https://nvd.nist.gov/vuln/detail/CVE-2021-30583 [ 72 ] CVE-2022-0306 https://nvd.nist.gov/vuln/detail/CVE-2022-0306 [ 73 ] CVE-2021-38013 https://nvd.nist.gov/vuln/detail/CVE-2021-38013 [ 74 ] CVE-2021-37993 https://nvd.nist.gov/vuln/detail/CVE-2021-37993 [ 75 ] CVE-2021-37979 https://nvd.nist.gov/vuln/detail/CVE-2021-37979 [ 76 ] CVE-2022-0301 https://nvd.nist.gov/vuln/detail/CVE-2022-0301 [ 77 ] CVE-2021-37999 https://nvd.nist.gov/vuln/detail/CVE-2021-37999 [ 78 ] CVE-2021-37977 https://nvd.nist.gov/vuln/detail/CVE-2021-37977 [ 79 ] CVE-2021-37995 https://nvd.nist.gov/vuln/detail/CVE-2021-37995 [ 80 ] CVE-2022-0117 https://nvd.nist.gov/vuln/detail/CVE-2022-0117 [ 81 ] CVE-2021-30592 https://nvd.nist.gov/vuln/detail/CVE-2021-30592 [ 82 ] CVE-2021-38018 https://nvd.nist.gov/vuln/detail/CVE-2021-38018 [ 83 ] CVE-2021-30612 https://nvd.nist.gov/vuln/detail/CVE-2021-30612 [ 84 ] CVE-2021-38006 https://nvd.nist.gov/vuln/detail/CVE-2021-38006 [ 85 ] CVE-2021-37982 https://nvd.nist.gov/vuln/detail/CVE-2021-37982 [ 86 ] CVE-2022-0300 https://nvd.nist.gov/vuln/detail/CVE-2022-0300 [ 87 ] CVE-2022-0113 https://nvd.nist.gov/vuln/detail/CVE-2022-0113 [ 88 ] CVE-2021-37971 https://nvd.nist.gov/vuln/detail/CVE-2021-37971 [ 89 ] CVE-2021-37987 https://nvd.nist.gov/vuln/detail/CVE-2021-37987 [ 90 ] CVE-2022-0308 https://nvd.nist.gov/vuln/detail/CVE-2022-0308 [ 91 ] CVE-2022-0115 https://nvd.nist.gov/vuln/detail/CVE-2022-0115 [ 92 ] CVE-2021-37961 https://nvd.nist.gov/vuln/detail/CVE-2021-37961 [ 93 ] CVE-2022-0111 https://nvd.nist.gov/vuln/detail/CVE-2022-0111 [ 94 ] CVE-2021-30618 https://nvd.nist.gov/vuln/detail/CVE-2021-30618 [ 95 ] CVE-2021-38005 https://nvd.nist.gov/vuln/detail/CVE-2021-38005 [ 96 ] CVE-2021-30600 https://nvd.nist.gov/vuln/detail/CVE-2021-30600 [ 97 ] CVE-2021-30615 https://nvd.nist.gov/vuln/detail/CVE-2021-30615 [ 98 ] CVE-2021-38017 https://nvd.nist.gov/vuln/detail/CVE-2021-38017 [ 99 ] CVE-2022-0291 https://nvd.nist.gov/vuln/detail/CVE-2022-0291 [ 100 ] CVE-2021-30597 https://nvd.nist.gov/vuln/detail/CVE-2021-30597 [ 101 ] CVE-2021-30608 https://nvd.nist.gov/vuln/detail/CVE-2021-30608 [ 102 ] CVE-2022-0294 https://nvd.nist.gov/vuln/detail/CVE-2022-0294 [ 103 ] CVE-2021-30588 https://nvd.nist.gov/vuln/detail/CVE-2021-30588 [ 104 ] CVE-2022-0307 https://nvd.nist.gov/vuln/detail/CVE-2022-0307 [ 105 ] CVE-2021-37966 https://nvd.nist.gov/vuln/detail/CVE-2021-37966 [ 106 ] CVE-2021-30596 https://nvd.nist.gov/vuln/detail/CVE-2021-30596 [ 107 ] CVE-2021-30614 https://nvd.nist.gov/vuln/detail/CVE-2021-30614 [ 108 ] CVE-2021-37960 https://nvd.nist.gov/vuln/detail/CVE-2021-37960 [ 109 ] CVE-2021-30590 https://nvd.nist.gov/vuln/detail/CVE-2021-30590 [ 110 ] CVE-2021-37997 https://nvd.nist.gov/vuln/detail/CVE-2021-37997 [ 111 ] CVE-2021-38007 https://nvd.nist.gov/vuln/detail/CVE-2021-38007 [ 112 ] CVE-2021-30601 https://nvd.nist.gov/vuln/detail/CVE-2021-30601 [ 113 ] CVE-2021-38000 https://nvd.nist.gov/vuln/detail/CVE-2021-38000 [ 114 ] CVE-2021-38008 https://nvd.nist.gov/vuln/detail/CVE-2021-38008 [ 115 ] CVE-2021-30617 https://nvd.nist.gov/vuln/detail/CVE-2021-30617 [ 116 ] CVE-2021-37985 https://nvd.nist.gov/vuln/detail/CVE-2021-37985 [ 117 ] CVE-2022-0116 https://nvd.nist.gov/vuln/detail/CVE-2022-0116 [ 118 ] CVE-2021-30589 https://nvd.nist.gov/vuln/detail/CVE-2021-30589 [ 119 ] CVE-2021-30620 https://nvd.nist.gov/vuln/detail/CVE-2021-30620 [ 120 ] CVE-2021-37974 https://nvd.nist.gov/vuln/detail/CVE-2021-37974 [ 121 ] CVE-2021-38002 https://nvd.nist.gov/vuln/detail/CVE-2021-38002 [ 122 ] CVE-2021-37958 https://nvd.nist.gov/vuln/detail/CVE-2021-37958 [ 123 ] CVE-2021-38015 https://nvd.nist.gov/vuln/detail/CVE-2021-38015 [ 124 ] CVE-2022-0120 https://nvd.nist.gov/vuln/detail/CVE-2022-0120 [ 125 ] CVE-2021-30585 https://nvd.nist.gov/vuln/detail/CVE-2021-30585 [ 126 ] CVE-2021-30604 https://nvd.nist.gov/vuln/detail/CVE-2021-30604 [ 127 ] CVE-2021-30582 https://nvd.nist.gov/vuln/detail/CVE-2021-30582 [ 128 ] CVE-2021-38009 https://nvd.nist.gov/vuln/detail/CVE-2021-38009 [ 129 ] CVE-2021-38010 https://nvd.nist.gov/vuln/detail/CVE-2021-38010 [ 130 ] CVE-2021-37957 https://nvd.nist.gov/vuln/detail/CVE-2021-37957 [ 131 ] CVE-2021-30628 https://nvd.nist.gov/vuln/detail/CVE-2021-30628 [ 132 ] CVE-2021-30572 https://nvd.nist.gov/vuln/detail/CVE-2021-30572 [ 133 ] CVE-2021-38020 https://nvd.nist.gov/vuln/detail/CVE-2021-38020 [ 134 ] CVE-2022-0096 https://nvd.nist.gov/vuln/detail/CVE-2022-0096 [ 135 ] CVE-2021-4099 https://nvd.nist.gov/vuln/detail/CVE-2021-4099 [ 136 ] CVE-2021-30578 https://nvd.nist.gov/vuln/detail/CVE-2021-30578 [ 137 ] CVE-2021-30629 https://nvd.nist.gov/vuln/detail/CVE-2021-30629 [ 138 ] CVE-2021-38021 https://nvd.nist.gov/vuln/detail/CVE-2021-38021 [ 139 ] CVE-2022-0108 https://nvd.nist.gov/vuln/detail/CVE-2022-0108 [ 140 ] CVE-2021-30577 https://nvd.nist.gov/vuln/detail/CVE-2021-30577 [ 141 ] CVE-2021-30569 https://nvd.nist.gov/vuln/detail/CVE-2021-30569 [ 142 ] CVE-2021-37956 https://nvd.nist.gov/vuln/detail/CVE-2021-37956 [ 143 ] CVE-2022-0100 https://nvd.nist.gov/vuln/detail/CVE-2022-0100 [ 144 ] CVE-2021-30579 https://nvd.nist.gov/vuln/detail/CVE-2021-30579 [ 145 ] CVE-2022-0104 https://nvd.nist.gov/vuln/detail/CVE-2022-0104 [ 146 ] CVE-2022-0106 https://nvd.nist.gov/vuln/detail/CVE-2022-0106 [ 147 ] CVE-2022-0103 https://nvd.nist.gov/vuln/detail/CVE-2022-0103 [ 148 ] CVE-2021-4098 https://nvd.nist.gov/vuln/detail/CVE-2021-4098 [ 149 ] CVE-2021-30565 https://nvd.nist.gov/vuln/detail/CVE-2021-30565 [ 150 ] CVE-2021-30573 https://nvd.nist.gov/vuln/detail/CVE-2021-30573 [ 151 ] CVE-2021-4100 https://nvd.nist.gov/vuln/detail/CVE-2021-4100 [ 152 ] CVE-2021-30568 https://nvd.nist.gov/vuln/detail/CVE-2021-30568 [ 153 ] CVE-2022-0102 https://nvd.nist.gov/vuln/detail/CVE-2022-0102 [ 154 ] CVE-2021-30621 https://nvd.nist.gov/vuln/detail/CVE-2021-30621 [ 155 ] CVE-2021-30631 https://nvd.nist.gov/vuln/detail/CVE-2021-30631 [ 156 ] CVE-2022-0098 https://nvd.nist.gov/vuln/detail/CVE-2022-0098 [ 157 ] CVE-2021-38022 https://nvd.nist.gov/vuln/detail/CVE-2021-38022 [ 158 ] CVE-2022-0099 https://nvd.nist.gov/vuln/detail/CVE-2022-0099 [ 159 ] CVE-2021-30566 https://nvd.nist.gov/vuln/detail/CVE-2021-30566 [ 160 ] CVE-2021-37996 https://nvd.nist.gov/vuln/detail/CVE-2021-37996 [ 161 ] CVE-2021-38019 https://nvd.nist.gov/vuln/detail/CVE-2021-38019 [ 162 ] CVE-2021-30575 https://nvd.nist.gov/vuln/detail/CVE-2021-30575 [ 163 ] CVE-2021-30581 https://nvd.nist.gov/vuln/detail/CVE-2021-30581 [ 164 ] CVE-2021-30571 https://nvd.nist.gov/vuln/detail/CVE-2021-30571 [ 165 ] CVE-2021-30633 https://nvd.nist.gov/vuln/detail/CVE-2021-30633 [ 166 ] CVE-2021-4101 https://nvd.nist.gov/vuln/detail/CVE-2021-4101 [ 167 ] CVE-2022-0107 https://nvd.nist.gov/vuln/detail/CVE-2022-0107 [ 168 ] CVE-2021-30632 https://nvd.nist.gov/vuln/detail/CVE-2021-30632 [ 169 ] CVE-2021-30574 https://nvd.nist.gov/vuln/detail/CVE-2021-30574 [ 170 ] CVE-2021-30580 https://nvd.nist.gov/vuln/detail/CVE-2021-30580 [ 171 ] CVE-2022-0101 https://nvd.nist.gov/vuln/detail/CVE-2022-0101 [ 172 ] CVE-2021-4102 https://nvd.nist.gov/vuln/detail/CVE-2021-4102 [ 173 ] CVE-2021-30567 https://nvd.nist.gov/vuln/detail/CVE-2021-30567 [ 174 ] CVE-2022-0105 https://nvd.nist.gov/vuln/detail/CVE-2022-0105 [ 175 ] CVE-2022-0097 https://nvd.nist.gov/vuln/detail/CVE-2022-0097 [ 176 ] CVE-2021-30619 https://nvd.nist.gov/vuln/detail/CVE-2021-30619 [ 177 ] CVE-2021-30576 https://nvd.nist.gov/vuln/detail/CVE-2021-30576 [ 178 ] CVE-2021-30630 https://nvd.nist.gov/vuln/detail/CVE-2021-30630 [ 179 ] CVE-2021-30623 https://nvd.nist.gov/vuln/detail/CVE-2021-30623 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202201-02 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2022 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5