Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 934959 (CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293) - <www-client/chromium-126.0.6478.126, <www-client/google-chrome-126.0.6478.126, <www-client/microsoft-edge-126.0.2592.8, <www-client/opera-112.0.5197.25: multiple vulnerabilities
Summary: <www-client/chromium-126.0.6478.126, <www-client/google-chrome-126.0.6478.126...
Status: CONFIRMED
Alias: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://chromereleases.googleblog.com...
Whiteboard:
Keywords:
Depends on: 944807 934976
Blocks:
  Show dependency tree
 
Reported: 2024-06-26 07:01 UTC by Matt Jolly
Modified: 2024-11-24 12:14 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2024-06-26 07:01:39 UTC 
The Stable channel has been updated to 126.0.6478.126 for Linux which will roll out over the coming days/weeks.

[$10000][342428008] High CVE-2024-6290: Use after free in Dawn. Reported by wgslfuzz on 2024-05-23
[$4000][40942995] High CVE-2024-6291: Use after free in Swiftshader. Reported by Cassidy Kim(@cassidy6564) on 2023-11-15
[TBD][342545100] High CVE-2024-6292: Use after free in Dawn. Reported by wgslfuzz on 2024-05-24
[TBD][345993680] High CVE-2024-6293: Use after free in Dawn. Reported by wgslfuzz on 2024-06-0
Comment 1 Larry the Git Cow gentoo-dev 2024-06-26 07:14:19 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fefb3374bc1df91a69a635bd6af2c845be552f5a

commit fefb3374bc1df91a69a635bd6af2c845be552f5a
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-06-26 06:59:36 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-06-26 07:09:27 +0000

    www-client/google-chrome: automated update (126.0.6478.126)
    
    Bug: https://bugs.gentoo.org/934959
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-126.0.6478.114.ebuild => google-chrome-126.0.6478.126.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
Comment 2 Larry the Git Cow gentoo-dev 2024-06-26 22:32:25 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1f8027b8b39b3077ba83ac67ddc8a6ff415eae91

commit 1f8027b8b39b3077ba83ac67ddc8a6ff415eae91
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-06-26 22:31:57 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-06-26 22:32:17 +0000

    www-client/chromium: add 126.0.6478.126
    
    Bug: https://bugs.gentoo.org/934959
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-126.0.6478.126.ebuild | 1452 ++++++++++++++++++++
 2 files changed, 1454 insertions(+)