Bug 916252 – <www-client/{google-chrome,chromium}-118.0.5993.117 <www-client/microsoft-edge-118.0.2088.76: Multiple vulnerabilities

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sam James 2023-10-24 22:56:49 UTC]

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$3000][1491296] High CVE-2023-5472: Use after free in Profiles. Reported by @18楼梦想改造家 on 2023-10-10

[Comment 1 Sam James 2023-10-24 22:57:10 UTC]

Please bump to 118.0.5993.117.

[Comment 2 Larry the Git Cow 2023-10-25 16:16:23 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1f22afd17ab1916a8a8af81eea66825aa81e9f7b

commit 1f22afd17ab1916a8a8af81eea66825aa81e9f7b
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2023-10-25 15:46:44 +0000
Commit:     Mike Gilbert <[e-mail]>
CommitDate: 2023-10-25 16:15:33 +0000

    www-client/google-chrome: automated update (118.0.5993.117)
    
    Bug: https://bugs.gentoo.org/916252
    Signed-off-by: Matt Jolly <[e-mail]>
    Signed-off-by: Mike Gilbert <[e-mail]>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-118.0.5993.88.ebuild => google-chrome-118.0.5993.117.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=99fd5d8b4fe4418499a0910479fd789cbf4e0139

commit 99fd5d8b4fe4418499a0910479fd789cbf4e0139
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2023-10-25 14:40:34 +0000
Commit:     Mike Gilbert <[e-mail]>
CommitDate: 2023-10-25 16:15:30 +0000

    www-client/chromium: add 118.0.5993.117
    
    Bug: https://bugs.gentoo.org/916252
    Signed-off-by: Matt Jolly <[e-mail]>
    Signed-off-by: Mike Gilbert <[e-mail]>

 www-client/chromium/Manifest                       |    1 +
 www-client/chromium/chromium-118.0.5993.117.ebuild | 1225 ++++++++++++++++++++
 2 files changed, 1226 insertions(+)

[Comment 3 John Helmert III 2023-10-25 18:26:31 UTC]

Please stabilize when ready, thanks!

[Comment 4 Larry the Git Cow 2024-01-31 15:39:50 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=8064a0b694d29fb2fca491d65494098fb43c2ffa

commit 8064a0b694d29fb2fca491d65494098fb43c2ffa
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-01-31 15:39:13 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2024-01-31 15:39:35 +0000

    [ GLSA 202401-34 ] Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/907999
    Bug: https://bugs.gentoo.org/908471
    Bug: https://bugs.gentoo.org/909283
    Bug: https://bugs.gentoo.org/910522
    Bug: https://bugs.gentoo.org/911675
    Bug: https://bugs.gentoo.org/912364
    Bug: https://bugs.gentoo.org/913016
    Bug: https://bugs.gentoo.org/913710
    Bug: https://bugs.gentoo.org/914350
    Bug: https://bugs.gentoo.org/914871
    Bug: https://bugs.gentoo.org/915137
    Bug: https://bugs.gentoo.org/915560
    Bug: https://bugs.gentoo.org/915961
    Bug: https://bugs.gentoo.org/916252
    Bug: https://bugs.gentoo.org/916620
    Bug: https://bugs.gentoo.org/917021
    Bug: https://bugs.gentoo.org/917357
    Bug: https://bugs.gentoo.org/918882
    Bug: https://bugs.gentoo.org/919321
    Bug: https://bugs.gentoo.org/919802
    Bug: https://bugs.gentoo.org/920442
    Bug: https://bugs.gentoo.org/921337
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202401-34.xml | 229 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 229 insertions(+)