Bug 918586 (CVE-2023-36022, CVE-2023-36029, CVE-2023-36034, CVE-2023-36409, CVE-2023-36559, CVE-2023-36562, CVE-2023-36727, CVE-2023-36735, CVE-2023-36741, CVE-2023-36787)

Summary:	<www-client/microsoft-edge-119.0.2151.44: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	major	CC:	chromium
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	A2 [glsa+]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-26 03:16:53 UTC

CVE-2023-36409 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36409):

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVE-2023-36034 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36034):

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2023-36022 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36022):

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2023-36029 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36029):

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2023-36559 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36559):

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2023-36562 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36562):

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2023-36727 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36727):

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2023-36735 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36735):

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2023-36741 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36741):

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2023-36787 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36787):

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Looks like these are all fixed by 119.0.2151.44. Cleanup is already done.

Comment 1 Larry the Git Cow gentoo-dev

2024-02-03 08:01:28 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=f0f0b4193142467bf80273c59cea40220cf3ecc3

commit f0f0b4193142467bf80273c59cea40220cf3ecc3
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-02-03 08:00:42 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-02-03 08:01:23 +0000

    [ GLSA 202402-05 ] Microsoft Edge: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/907817
    Bug: https://bugs.gentoo.org/908518
    Bug: https://bugs.gentoo.org/918586
    Bug: https://bugs.gentoo.org/919495
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202402-05.xml | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)