Bug 908471 (CVE-2023-3214, CVE-2023-3215, CVE-2023-3216, CVE-2023-3217) – <www-client/chromium-114.0.5735.133, <www-client/google-chrome-114.0.5735.133 <www-client/microsoft-edge-114.0.1823.51: Multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Sam James 2023-06-14 03:37:50 UTC]

https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html

[$TBD][1450568] Critical CVE-2023-3214: Use after free in Autofill payments. Reported by Rong Jian of VRI on 2023-06-01

[$3000][1446274] High CVE-2023-3215: Use after free in WebRTC. Reported by asnine on 2023-05-17

[$TBD][1450114] High CVE-2023-3216: Type Confusion in V8. Reported by 5n1p3r0010 from Topsec ChiXiao Lab on 2023-05-31

[$NA][1450601] High CVE-2023-3217: Use after free in WebXR. Reported by Sergei Glazunov of Google Project Zero on 2023-06-01

[Comment 1 Sam James 2023-06-14 03:38:01 UTC]

Please bump to 114.0.5735.133.

[Comment 2 Sam James 2023-06-14 15:59:49 UTC]

commit efe7fdf8963a2d184187dbaa8627b581a5a6f291
Author: Matt Jolly <[e-mail]>
Date:   Wed Jun 14 21:54:41 2023 +1000

    www-client/chromium: add 114.0.5735.133

    update pulseaudio dependency

    Signed-off-by: Matt Jolly <[e-mail]>
    Closes: https://github.com/gentoo/gentoo/pull/31436
    Signed-off-by: Mike Gilbert <[e-mail]>

[Comment 3 Larry the Git Cow 2023-06-29 14:55:13 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8bf54736b16d57e213987afcc79273d9d0e4bcde

commit 8bf54736b16d57e213987afcc79273d9d0e4bcde
Author:     Stephan Hartmann <[e-mail]>
AuthorDate: 2023-06-29 14:55:05 +0000
Commit:     Stephan Hartmann <[e-mail]>
CommitDate: 2023-06-29 14:55:05 +0000

    www-client/chromium: drop 114.0.5735.110
    
    Bug: https://bugs.gentoo.org/908471
    Signed-off-by: Stephan Hartmann <[e-mail]>

 www-client/chromium/Manifest                       |    1 -
 www-client/chromium/chromium-114.0.5735.110.ebuild | 1268 --------------------
 2 files changed, 1269 deletions(-)

[Comment 4 Larry the Git Cow 2024-01-31 15:40:02 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=8064a0b694d29fb2fca491d65494098fb43c2ffa

commit 8064a0b694d29fb2fca491d65494098fb43c2ffa
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-01-31 15:39:13 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2024-01-31 15:39:35 +0000

    [ GLSA 202401-34 ] Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/907999
    Bug: https://bugs.gentoo.org/908471
    Bug: https://bugs.gentoo.org/909283
    Bug: https://bugs.gentoo.org/910522
    Bug: https://bugs.gentoo.org/911675
    Bug: https://bugs.gentoo.org/912364
    Bug: https://bugs.gentoo.org/913016
    Bug: https://bugs.gentoo.org/913710
    Bug: https://bugs.gentoo.org/914350
    Bug: https://bugs.gentoo.org/914871
    Bug: https://bugs.gentoo.org/915137
    Bug: https://bugs.gentoo.org/915560
    Bug: https://bugs.gentoo.org/915961
    Bug: https://bugs.gentoo.org/916252
    Bug: https://bugs.gentoo.org/916620
    Bug: https://bugs.gentoo.org/917021
    Bug: https://bugs.gentoo.org/917357
    Bug: https://bugs.gentoo.org/918882
    Bug: https://bugs.gentoo.org/919321
    Bug: https://bugs.gentoo.org/919802
    Bug: https://bugs.gentoo.org/920442
    Bug: https://bugs.gentoo.org/921337
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202401-34.xml | 229 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 229 insertions(+)