Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 942924 (CVE-2024-10826, CVE-2024-10827) - <www-client/chromium-130.0.6723.116, <www-client/google-chrome-130.0.6723.116, www-client/microsoft-edge, www-client/opera: Multiple vulnerabilities
Summary: <www-client/chromium-130.0.6723.116, <www-client/google-chrome-130.0.6723.116...
Status: CONFIRMED
Alias: CVE-2024-10826, CVE-2024-10827
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://chromereleases.googleblog.com...
Whiteboard:
Keywords:
Depends on: 942930
Blocks:
  Show dependency tree
 
Reported: 2024-11-05 23:05 UTC by Matt Jolly
Modified: 2024-11-06 04:53 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2024-11-05 23:05:23 UTC 
The Stable channel has been updated to 130.0.6723.116 for Linux which will roll out over the coming days/weeks.


This update includes 2 security fixes. 

[TBD][370217726] High CVE-2024-10826: Use after free in Family Experiences. Reported by Anonymous on 2024-09-29
[TBD][375065084] High CVE-2024-10827: Use after free in Serial. Reported by Anonymous on 2024-10-23
Comment 1 Larry the Git Cow gentoo-dev 2024-11-06 04:49:11 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=40932cab012ea600d4b86db24d28d39228b68332

commit 40932cab012ea600d4b86db24d28d39228b68332
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-11-06 04:22:30 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-11-06 04:48:47 +0000

    www-client/google-chrome: automated update (130.0.6723.116)
    
    Bug: https://bugs.gentoo.org/942924
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-130.0.6723.91.ebuild => google-chrome-130.0.6723.116.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=be4e8327ba6916753e99dc838aa4fda8d4dfba40

commit be4e8327ba6916753e99dc838aa4fda8d4dfba40
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-11-06 03:44:49 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-11-06 04:48:45 +0000

    www-client/chromium: add 130.0.6723.116
    
    Bug: https://bugs.gentoo.org/942924
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-130.0.6723.116.ebuild | 1523 ++++++++++++++++++++
 2 files changed, 1525 insertions(+)