Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 915137 (CVE-2023-5346) - <www-client/chromium-117.0.5938.149 <www-client/google-chrome-117.0.5938.149 <www-client/microsoft-edge-117.0.2045.55: Type Confusion in V8.
Summary: <www-client/chromium-117.0.5938.149 <www-client/google-chrome-117.0.5938.149 ...
Status: RESOLVED FIXED
Alias: CVE-2023-5346
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL:
Whiteboard: A2 [glsa+]
Keywords: PullRequest
Depends on: 915151
Blocks:
  Show dependency tree
 
Reported: 2023-10-03 20:35 UTC by Matt Jolly
Modified: 2024-01-31 15:44 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2023-10-03 20:35:43 UTC
The Stable channel has been updated to 117.0.5938.149 for Mac and Linux

This update includes 1 security fix. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$8000][1485829] High CVE-2023-5346: Type Confusion in V8. Reported by Amit Kumar on 2023-09-22

https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop.html
Comment 1 Larry the Git Cow gentoo-dev 2023-10-03 22:20:47 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=977944816cdaf4a55bd5c0317fc0067a99c0fb87

commit 977944816cdaf4a55bd5c0317fc0067a99c0fb87
Author:     Matt Jolly <Matt.Jolly@footclan.ninja>
AuthorDate: 2023-10-03 21:31:30 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-10-03 22:20:02 +0000

    www-client/chromium: add 117.0.5938.149
    
    Bug: https://bugs.gentoo.org/915137
    Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja>
    Closes: https://github.com/gentoo/gentoo/pull/33174
    Signed-off-by: Sam James <sam@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-117.0.5938.149.ebuild | 1281 ++++++++++++++++++++
 2 files changed, 1283 insertions(+)
Comment 2 Larry the Git Cow gentoo-dev 2023-10-09 20:30:56 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=851ccf37040edd04cd7f97856888c700b205ad5d

commit 851ccf37040edd04cd7f97856888c700b205ad5d
Author:     Matt Jolly <Matt.Jolly@footclan.ninja>
AuthorDate: 2023-10-07 03:07:20 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-10-09 20:30:20 +0000

    www-client/chromium: drop 117.0.5938.132
    
    Bug: https://bugs.gentoo.org/915137
    Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja>
    Closes: https://github.com/gentoo/gentoo/pull/33223
    Signed-off-by: Sam James <sam@gentoo.org>

 www-client/chromium/Manifest                       |    2 -
 www-client/chromium/chromium-117.0.5938.132.ebuild | 1281 --------------------
 2 files changed, 1283 deletions(-)
Comment 3 Larry the Git Cow gentoo-dev 2024-01-31 15:39:51 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=8064a0b694d29fb2fca491d65494098fb43c2ffa

commit 8064a0b694d29fb2fca491d65494098fb43c2ffa
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-01-31 15:39:13 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-01-31 15:39:35 +0000

    [ GLSA 202401-34 ] Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/907999
    Bug: https://bugs.gentoo.org/908471
    Bug: https://bugs.gentoo.org/909283
    Bug: https://bugs.gentoo.org/910522
    Bug: https://bugs.gentoo.org/911675
    Bug: https://bugs.gentoo.org/912364
    Bug: https://bugs.gentoo.org/913016
    Bug: https://bugs.gentoo.org/913710
    Bug: https://bugs.gentoo.org/914350
    Bug: https://bugs.gentoo.org/914871
    Bug: https://bugs.gentoo.org/915137
    Bug: https://bugs.gentoo.org/915560
    Bug: https://bugs.gentoo.org/915961
    Bug: https://bugs.gentoo.org/916252
    Bug: https://bugs.gentoo.org/916620
    Bug: https://bugs.gentoo.org/917021
    Bug: https://bugs.gentoo.org/917357
    Bug: https://bugs.gentoo.org/918882
    Bug: https://bugs.gentoo.org/919321
    Bug: https://bugs.gentoo.org/919802
    Bug: https://bugs.gentoo.org/920442
    Bug: https://bugs.gentoo.org/921337
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202401-34.xml | 229 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 229 insertions(+)