Summary: | <www-client/chromium-121.0.6167.85 <www-client/google-chrome-121.0.6167.85 <www-client/microsoft-edge-121.0.2277.83: Multiple vulnerabilities | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Matt Jolly <kangie> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | ajak, chromium, kangie |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/gentoo/pull/35001 | ||
Whiteboard: | A3 [glsa+] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 922982, 927746 | ||
Bug Blocks: |
Description
Matt Jolly
![]() The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=854bb6e5e3268bdfbfc94fbdfdfe234afbcbe16c commit 854bb6e5e3268bdfbfc94fbdfdfe234afbcbe16c Author: Matt Jolly <Matt.Jolly@footclan.ninja> AuthorDate: 2023-12-09 00:45:06 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-01-27 07:31:57 +0000 www-client/chromium: add 121.0.6167.85 This update includes a number of changes: - Rust is now a mandatory part of the build - The start of an implementation that enables the use of the bundled toolchain. It likely requires aditional work before it is useful. - Libxml dependency updated to >= 2.12.0 - Dropped legacy gcc fixes Bug: https://bugs.gentoo.org/922903 Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja> Signed-off-by: Sam James <sam@gentoo.org> www-client/chromium/Manifest | 3 + www-client/chromium/chromium-121.0.6167.85.ebuild | 1342 +++++++++++++++++++++ www-client/chromium/metadata.xml | 1 + 3 files changed, 1346 insertions(+) What about unmasking the profiler use flag of rust which is needed to build this version ? (In reply to François Valenduc from comment #2) > What about unmasking the profiler use flag of rust which is needed to build > this version ? We already did: commit 84db944af3d5e48473c5b59b25fd9b14fe6d2cba Author: Matt Jolly <Matt.Jolly@footclan.ninja> Date: Sat Jan 27 18:18:46 2024 +1000 profiles/base: unmask dev-lang/rust[profiler] for stable The profiler is required to build chromium >=121. With the initial justification for masking the USE being somewhat flimsy, in the absence of rust maintainers to tell us otherwise we'll unmask it for stable and deal with any consequences. Bug: https://bugs.gentoo.org/922982 Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja> Closes: https://github.com/gentoo/gentoo/pull/35039 Signed-off-by: Sam James <sam@gentoo.org> Please file new bugs for issues though. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/glsa.git/commit/?id=7a125f7a086a739d056063da56386fef4fe01284 commit 7a125f7a086a739d056063da56386fef4fe01284 Author: GLSAMaker <glsamaker@gentoo.org> AuthorDate: 2024-02-19 05:58:06 +0000 Commit: John Helmert III <ajak@gentoo.org> CommitDate: 2024-02-19 06:10:22 +0000 [ GLSA 202402-23 ] Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities Bug: https://bugs.gentoo.org/922062 Bug: https://bugs.gentoo.org/922340 Bug: https://bugs.gentoo.org/922903 Bug: https://bugs.gentoo.org/923370 Signed-off-by: GLSAMaker <glsamaker@gentoo.org> Signed-off-by: John Helmert III <ajak@gentoo.org> glsa-202402-23.xml | 84 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 84 insertions(+) |