Bug 951688 – www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www-client/opera: Use after free in Lens

• Status: CONFIRMED
• Product: Gentoo Security

[Description Matt Jolly 2025-03-20 21:37:23 UTC]

The Stable channel has been updated to 134.0.6998.117 for Linux.

Security Fixes and Rewards

[TBD][401029609] Critical CVE-2025-2476: Use after free in Lens. Reported by SungKwon Lee of Enki Whitehat on 2025-03-05

[Comment 1 Larry the Git Cow 2025-03-20 21:50:26 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=27ca3c5952cdcf805dd291b5cd870bbd3e42984d

commit 27ca3c5952cdcf805dd291b5cd870bbd3e42984d
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2025-03-20 21:39:50 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2025-03-20 21:47:40 +0000

    www-client/google-chrome: automated update (134.0.6998.117)
    
    Bug: https://bugs.gentoo.org/951688
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-134.0.6998.88.ebuild => google-chrome-134.0.6998.117.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7650b8e383e700f1dcbba3e7c9ca5381e4ac65f8

commit 7650b8e383e700f1dcbba3e7c9ca5381e4ac65f8
Author:     FoldCat <[e-mail]>
AuthorDate: 2025-03-20 04:20:03 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2025-03-20 21:47:39 +0000

    www-client/chromium: add 134.0.6998.117
    
    Signed-off-by: FoldCat <[e-mail]>
    Bug: https://bugs.gentoo.org/951688
    Closes: https://github.com/gentoo/gentoo/pull/41187
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-134.0.6998.117.ebuild | 1535 ++++++++++++++++++++
 2 files changed, 1537 insertions(+)