Gentoo alert 202608-31 (Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi)
| From: | glsamaker@gentoo.org | |
| To: | gentoo-announce@lists.gentoo.org | |
| Subject: | [gentoo-announce] [ GLSA 202608-31 ] Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities | |
| Date: | Thu, 27 Aug 2026 10:17:10 -0000 | |
| Message-ID: | <178782583078.1.14259265531871375834@3487e0ce30f3> |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202608-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Date: August 27, 2026 Bugs: #970044, #970045, #970311, #970511, #970908 ID: 202608-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Background ========== Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you. Affected packages ================= Package Vulnerable Unaffected ------------------------- ---------------- ----------------- www-client/chromium < 145.0.7632.159 >= 145.0.7632.159 www-client/google-chrome < 145.0.7632.159 >= 145.0.7632.159 www-client/microsoft-edge < 145.0.3800.97 >= 145.0.3800.97 www-client/opera < 130.0.5846.0 >= 130.0.5846.0 www-client/vivaldi < 7.8.3925.76 >= 7.8.3925.76 Description =========== Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-145.0.7632.159" All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-145.0.7632.159" All Microsoft Edge users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-145.0.3800.97" All Opera users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-130.0.5846.0" All Vivaldi users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.8.3925.76" References ========== [ 1 ] CVE-2026-2313 https://nvd.nist.gov/vuln/detail/CVE-2026-2313 [ 2 ] CVE-2026-2314 https://nvd.nist.gov/vuln/detail/CVE-2026-2314 [ 3 ] CVE-2026-2315 https://nvd.nist.gov/vuln/detail/CVE-2026-2315 [ 4 ] CVE-2026-2316 https://nvd.nist.gov/vuln/detail/CVE-2026-2316 [ 5 ] CVE-2026-2317 https://nvd.nist.gov/vuln/detail/CVE-2026-2317 [ 6 ] CVE-2026-2318 https://nvd.nist.gov/vuln/detail/CVE-2026-2318 [ 7 ] CVE-2026-2319 https://nvd.nist.gov/vuln/detail/CVE-2026-2319 [ 8 ] CVE-2026-2320 https://nvd.nist.gov/vuln/detail/CVE-2026-2320 [ 9 ] CVE-2026-2321 https://nvd.nist.gov/vuln/detail/CVE-2026-2321 [ 10 ] CVE-2026-2322 https://nvd.nist.gov/vuln/detail/CVE-2026-2322 [ 11 ] CVE-2026-2323 https://nvd.nist.gov/vuln/detail/CVE-2026-2323 [ 12 ] CVE-2026-2441 https://nvd.nist.gov/vuln/detail/CVE-2026-2441 [ 13 ] CVE-2026-2648 https://nvd.nist.gov/vuln/detail/CVE-2026-2648 [ 14 ] CVE-2026-2649 https://nvd.nist.gov/vuln/detail/CVE-2026-2649 [ 15 ] CVE-2026-2650 https://nvd.nist.gov/vuln/detail/CVE-2026-2650 [ 16 ] CVE-2026-3061 https://nvd.nist.gov/vuln/detail/CVE-2026-3061 [ 17 ] CVE-2026-3062 https://nvd.nist.gov/vuln/detail/CVE-2026-3062 [ 18 ] CVE-2026-3063 https://nvd.nist.gov/vuln/detail/CVE-2026-3063 [ 19 ] CVE-2026-3536 https://nvd.nist.gov/vuln/detail/CVE-2026-3536 [ 20 ] CVE-2026-3537 https://nvd.nist.gov/vuln/detail/CVE-2026-3537 [ 21 ] CVE-2026-3538 https://nvd.nist.gov/vuln/detail/CVE-2026-3538 [ 22 ] CVE-2026-3539 https://nvd.nist.gov/vuln/detail/CVE-2026-3539 [ 23 ] CVE-2026-3540 https://nvd.nist.gov/vuln/detail/CVE-2026-3540 [ 24 ] CVE-2026-3541 https://nvd.nist.gov/vuln/detail/CVE-2026-3541 [ 25 ] CVE-2026-3542 https://nvd.nist.gov/vuln/detail/CVE-2026-3542 [ 26 ] CVE-2026-3543 https://nvd.nist.gov/vuln/detail/CVE-2026-3543 [ 27 ] CVE-2026-3544 https://nvd.nist.gov/vuln/detail/CVE-2026-3544 [ 28 ] CVE-2026-3545 https://nvd.nist.gov/vuln/detail/CVE-2026-3545 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202608-31 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2026 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmqQDqYbFIAAAAAABAAO bWFudTIsMi41KzEuMTIsMiwyAAoJEBTEJDmlcvvZjg8P/3LTS6M3pOM063snzxkY EzE4xITrdKUNUehr1d9egKV69sDgIDEQAgJMKutZcTjWKvVIpdcEX0R5IzZQG1+6 rbdsQdAi2cfnu8Jih1W9F7fYHYTxRWPRHr3kdnUNx+BnXMaT6rXxVxlDwBJlBcTj 8Kn59imIrQ027rMQuY+PdslyWpAQdeHeDee2fHt+SEpj7XN1t9U9e01QnPaLZH9V blBwfr3zY/SyFmF95ep8oI1dbh7Rp6i/0K23ehJZ/262W3EGcl5VtneMbEvv9+G9 b0au4xlTzFeoknB57km2EyepY80S2YxzCoKZ2M1Aa+DMf+RBRHJ3TYKnc+Z7TkpO jg7u39u2hrGlzC3qH98NEPYd0MGg+IMxMhJOYdV1uF1mLaA/6nijHjysf7Cg8Gad WvT2Hu9Cvx0EVg7TkHnpxUzrbka4juSB/fq2zHI6Z0T/avChx5XUHRYk2U+IQOur u2g3/jBgMiEy0LF1VZOZhASj0d4z6xJMThZy2tc7Z/QJ2YfSHrN4FB0Kyjhr49zf DFX02tOt2dMAJ34E1CgnDUcVwCReeifWQZpMPJm7CfuONcOEAImm37JkjHWkLr/N mrRbF/E16d1115T+rzGfCvS5p0lVRkGQr0PE/P9OJA4F6T9leIsOzFVZUurlCDw8 pjCJCSvL0fHy4Sd3d3Rql0l9 =Dkz8 -----END PGP SIGNATURE-----