Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 931653 (CVE-2024-4671)

Summary: <www-client/chromium-124.0.6367.201, <www-client/google-chrome-124.0.6367.201, <www-client/microsoft-edge-124.0.2478.97: Use after free in Visuals
Product: Gentoo Security Reporter: Sam James <sam>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: IN_PROGRESS ---    
Severity: normal CC: chewi, chromium, ionen, kangie
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 931694    
Bug Blocks:    

Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-05-10 00:34:53 UTC
"""
[N/A][339266700] High CVE-2024-4671: Use after free in Visuals. Reported by Anonymous on 2024-05-07

Google is aware that an exploit for CVE-2024-4671 exists in the wild.
"""
Comment 1 Larry the Git Cow gentoo-dev 2024-05-10 21:35:08 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f3b45a700053dbeb9751c9e2dbebe0d304a1f993

commit f3b45a700053dbeb9751c9e2dbebe0d304a1f993
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-05-10 21:20:15 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-05-10 21:30:53 +0000

    www-client/google-chrome: automated update (124.0.6367.201)
    
    Bug: https://bugs.gentoo.org/931653
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-124.0.6367.155.ebuild => google-chrome-124.0.6367.201.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2120217c823c1324e10b340b94ad6ba4a54ea4b6

commit 2120217c823c1324e10b340b94ad6ba4a54ea4b6
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-05-10 21:19:07 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-05-10 21:19:39 +0000

    www-client/chromium: add 124.0.6367.201
    
    Bug: https://bugs.gentoo.org/931653
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    1 +
 www-client/chromium/chromium-124.0.6367.201.ebuild | 1437 ++++++++++++++++++++
 2 files changed, 1438 insertions(+)