Bug 934959 (CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293)

Summary:	<www-client/chromium-126.0.6478.126, <www-client/google-chrome-126.0.6478.126, <www-client/microsoft-edge-126.0.2592.8, <www-client/opera-112.0.5197.25: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	Matt Jolly <kangie>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	chromium, kangie
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	944807, 934976
Bug Blocks:

Description Matt Jolly gentoo-dev

2024-06-26 07:01:39 UTC

The Stable channel has been updated to 126.0.6478.126 for Linux which will roll out over the coming days/weeks.

[$10000][342428008] High CVE-2024-6290: Use after free in Dawn. Reported by wgslfuzz on 2024-05-23
[$4000][40942995] High CVE-2024-6291: Use after free in Swiftshader. Reported by Cassidy Kim(@cassidy6564) on 2023-11-15
[TBD][342545100] High CVE-2024-6292: Use after free in Dawn. Reported by wgslfuzz on 2024-05-24
[TBD][345993680] High CVE-2024-6293: Use after free in Dawn. Reported by wgslfuzz on 2024-06-0

Comment 1 Larry the Git Cow gentoo-dev

2024-06-26 07:14:19 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fefb3374bc1df91a69a635bd6af2c845be552f5a

commit fefb3374bc1df91a69a635bd6af2c845be552f5a
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-06-26 06:59:36 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-06-26 07:09:27 +0000

    www-client/google-chrome: automated update (126.0.6478.126)
    
    Bug: https://bugs.gentoo.org/934959
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-126.0.6478.114.ebuild => google-chrome-126.0.6478.126.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

Comment 2 Larry the Git Cow gentoo-dev

2024-06-26 22:32:25 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1f8027b8b39b3077ba83ac67ddc8a6ff415eae91

commit 1f8027b8b39b3077ba83ac67ddc8a6ff415eae91
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-06-26 22:31:57 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-06-26 22:32:17 +0000

    www-client/chromium: add 126.0.6478.126
    
    Bug: https://bugs.gentoo.org/934959
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-126.0.6478.126.ebuild | 1452 ++++++++++++++++++++
 2 files changed, 1454 insertions(+)