Bug 926869 (CVE-2024-2400) – <www-client/chromium-122.0.6261.128, <www-client/google-chrome-122.0.6261.128, <www-client/microsoft-edge-122.0.2365.92: multiple vulnerabilities

• Product: Gentoo Security
• Status: CONFIRMED ---

[Description Matt Jolly 2024-03-13 02:08:08 UTC]

The Stable channel has been updated to 122.0.6261.128 which will roll out over the coming days/weeks.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[TBD][327696052] High CVE-2024-2400: Use after free in Performance Manager. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab on 2024-03-01

[Comment 1 Larry the Git Cow 2024-03-13 02:25:32 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8ebbb57a68c7c91a1ea10f7674fd4d22f2f6048a

commit 8ebbb57a68c7c91a1ea10f7674fd4d22f2f6048a
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-03-13 02:15:31 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-03-13 02:22:55 +0000

    www-client/google-chrome: automated update (122.0.6261.128)
    
    Bug: https://bugs.gentoo.org/926869
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-122.0.6261.111.ebuild => google-chrome-122.0.6261.128.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

[Comment 2 Larry the Git Cow 2024-03-13 06:07:02 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7abce3b399537bca0c39e3307deeb32085d3659c

commit 7abce3b399537bca0c39e3307deeb32085d3659c
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-03-13 04:28:23 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-03-13 06:05:39 +0000

    www-client/chromium: add 122.0.6261.128
    
    Bug: https://bugs.gentoo.org/926869
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-122.0.6261.128.ebuild | 1386 ++++++++++++++++++++
 2 files changed, 1388 insertions(+)

[Comment 3 Larry the Git Cow 2024-03-16 07:40:39 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3dbbe726874d08791fdd46894bc9e39b44837cae

commit 3dbbe726874d08791fdd46894bc9e39b44837cae
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-03-16 07:25:35 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-03-16 07:38:55 +0000

    www-client/microsoft-edge: amd64 stable (122.0.2365.92)
    
    Bug: https://bugs.gentoo.org/926869
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/microsoft-edge/microsoft-edge-122.0.2365.92.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=efdbe6a05a8afd9515cb230a55e7395647310ba8

commit efdbe6a05a8afd9515cb230a55e7395647310ba8
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-03-16 07:25:31 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-03-16 07:38:19 +0000

    www-client/microsoft-edge: automated bump (122.0.2365.92)
    
    Bug: https://bugs.gentoo.org/926869
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/microsoft-edge/Manifest                 |   1 +
 .../microsoft-edge-122.0.2365.92.ebuild            | 127 +++++++++++++++++++++
 2 files changed, 128 insertions(+)