Chromium

[tomt]

At the risk of being accused of fear mongering, I will post this caution anyway particularly since I happen to like Chromium. It is a recent warning.

  https://security.gentoo.org/glsa/201612-11

[torreydale]

The unaffected version is the current version.  Updating regularly is already encouraged, so this warning is a repeat of best practices.

[tomt]

Just to be clear Torreydale, with regard to your response it could be misconstrued since in the link I provided it sates that Affected versions 55.0.2883.75 is affected also. Perhaps you can clear that up for us, furthermore the synoptic package presents the affected 53.02704.7 Chromium which probably needs to be updated. Someone who did not know and downloaded Chromium might not always practice "best Practices" and assume the package app is updated or perhaps that is the latest from Chromium. I personally take warnings from Linux Gentoo seriously.

[torreydale]

If you read the info from your link more closely, you'll see that it has a less than sign for the affected versions and a greater than or equal sign next to the unaffected  versions.

[tomt]

Yes I saw that when I went back to review it, nevertheless the warning about the repositories are still valid both in Ubuntu repos and synoptic packages which apparently do not update to the latest version right away so people should know about the threat.

[tomt]

Anyone wanting to download Chromium from either Ubuntu repos or synoptic package be advised neither of these as this date have updated to the latest 55 version which has been out. Good case for a rolling release. Threat is till there.

[torreydale]

Chromium is still outdated in the repository.  Version 56 is out, and I think the repository still shows version 53.  Does anyone know why that is?

[bluzeo]

ok that got me paranoid.... i like Chromuim cause of the HTML player.