814221 – (CVE-2021-37956, CVE-2021-37957, CVE-2021-37958, CVE-2021-37959, CVE-2021-37960, CVE-2021-37961, CVE-2021-37962, CVE-2021-37963, CVE-2021-37965, CVE-2021-37966, CVE-2021-37967, CVE-2021-37968, CVE-2021-37970, CVE-2021-37971) <www-client/chromium-94.0.4606.54 <www-client/google-chrome-94.0.4606.54: Multiple vulnerabilities (CVE-2021-{37956,37957,37958,37959,37960,37961,37962,37963,37965,37966,37967,37968,37970,37971})

Bug 814221 (CVE-2021-37956, CVE-2021-37957, CVE-2021-37958, CVE-2021-37959, CVE-2021-37960, CVE-2021-37961, CVE-2021-37962, CVE-2021-37963, CVE-2021-37965, CVE-2021-37966, CVE-2021-37967, CVE-2021-37968, CVE-2021-37970, CVE-2021-37971) - <www-client/chromium-94.0.4606.54 <www-client/google-chrome-94.0.4606.54: Multiple vulnerabilities (CVE-2021-{37956,37957,37958,37959,37960,37961,37962,37963,37965,37966,37967,37968,37970,37971})

Summary: <www-client/chromium-94.0.4606.54 <www-client/google-chrome-94.0.4606.54: Mul...

Status:	RESOLVED FIXED

Alias:	CVE-2021-37956, CVE-2021-37957, CVE-2021-37958, CVE-2021-37959, CVE-2021-37960, CVE-2021-37961, CVE-2021-37962, CVE-2021-37963, CVE-2021-37965, CVE-2021-37966, CVE-2021-37967, CVE-2021-37968, CVE-2021-37970, CVE-2021-37971

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal major (vote)
Assignee:	Gentoo Security

URL:	https://chromereleases.googleblog.com...
Whiteboard:	A2 [glsa+]
Keywords:

Depends on:	CVE-2021-37972 814374
Blocks:
	Show dependency tree

Reported:	2021-09-21 20:43 UTC by Stephan Hartmann (RETIRED)
Modified:	2022-01-31 05:34 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stephan Hartmann (RETIRED) gentoo-dev

2021-09-21 20:43:11 UTC

See ${URL}.

CVE-2021-37964 is for ChromeOS only:
  https://crrev.com/c/3097731

CVE-2021-37969 looks unrelated (Google Updater).

Comment 1 Larry the Git Cow gentoo-dev

2021-09-21 21:39:01 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8a207ee99c7b92fdb83a4c9e66dc178c8ff382e5

commit 8a207ee99c7b92fdb83a4c9e66dc178c8ff382e5
Author:     Stephan Hartmann <sultan@gentoo.org>
AuthorDate: 2021-09-21 21:38:17 +0000
Commit:     Stephan Hartmann <sultan@gentoo.org>
CommitDate: 2021-09-21 21:38:46 +0000

    www-client/chromium: stable channel bump to 94.0.4606.54
    
    Bug: https://bugs.gentoo.org/814221
    Package-Manager: Portage-3.0.20, Repoman-3.0.3
    Signed-off-by: Stephan Hartmann <sultan@gentoo.org>

 www-client/chromium/Manifest                                 |  2 +-
 ...mium-94.0.4606.50.ebuild => chromium-94.0.4606.54.ebuild} | 12 ++++++++----
 www-client/chromium/metadata.xml                             |  1 +
 3 files changed, 10 insertions(+), 5 deletions(-)

Comment 2 Larry the Git Cow gentoo-dev

2021-09-21 21:42:16 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da0662d97b88727b404e1b33ebb0bb14c5f7bc24

commit da0662d97b88727b404e1b33ebb0bb14c5f7bc24
Author:     Stephan Hartmann <sultan@gentoo.org>
AuthorDate: 2021-09-21 21:39:52 +0000
Commit:     Stephan Hartmann <sultan@gentoo.org>
CommitDate: 2021-09-21 21:41:30 +0000

    www-client/google-chrome: automated update (94.0.4606.54)
    
    Bug: https://bugs.gentoo.org/814221
    Signed-off-by: Stephan Hartmann <sultan@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...gle-chrome-93.0.4577.82.ebuild => google-chrome-94.0.4606.54.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

Comment 3 John Helmert III archtester

2021-09-22 23:57:03 UTC

Thanks sultan!

Comment 4 Larry the Git Cow gentoo-dev

2021-09-25 07:47:08 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e08515cdb0db40ea6e3ff2ea3ea2420bee94ca10

commit e08515cdb0db40ea6e3ff2ea3ea2420bee94ca10
Author:     Stephan Hartmann <sultan@gentoo.org>
AuthorDate: 2021-09-25 07:46:34 +0000
Commit:     Stephan Hartmann <sultan@gentoo.org>
CommitDate: 2021-09-25 07:47:04 +0000

    www-client/chromium: security cleanup
    
    Bug: https://bugs.gentoo.org/814221
    Package-Manager: Portage-3.0.20, Repoman-3.0.3
    Signed-off-by: Stephan Hartmann <sultan@gentoo.org>

 www-client/chromium/Manifest                       |   4 -
 www-client/chromium/chromium-93.0.4577.82.ebuild   | 948 ---------------------
 .../chromium-93-fix-build-with-system-ffmpeg.patch |  85 --
 3 files changed, 1037 deletions(-)

Comment 5 Larry the Git Cow gentoo-dev

2022-01-31 05:31:50 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=a5cb3b8ed2294fbfe4dfaf3e992220585c749f25

commit a5cb3b8ed2294fbfe4dfaf3e992220585c749f25
Author:     John Helmert III <ajak@gentoo.org>
AuthorDate: 2022-01-31 05:00:26 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-01-31 05:00:26 +0000

    [ GLSA 202201-02 ] Chromium, Google Chrome: Multiple vulnerabilities
    
    Bug: https://bugs.gentoo.org/803167
    Bug: https://bugs.gentoo.org/806223
    Bug: https://bugs.gentoo.org/808715
    Bug: https://bugs.gentoo.org/811348
    Bug: https://bugs.gentoo.org/813035
    Bug: https://bugs.gentoo.org/814221
    Bug: https://bugs.gentoo.org/814617
    Bug: https://bugs.gentoo.org/815673
    Bug: https://bugs.gentoo.org/816984
    Bug: https://bugs.gentoo.org/819054
    Bug: https://bugs.gentoo.org/820689
    Bug: https://bugs.gentoo.org/824274
    Bug: https://bugs.gentoo.org/829190
    Bug: https://bugs.gentoo.org/830642
    Bug: https://bugs.gentoo.org/831624
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202201-02.xml | 257 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 257 insertions(+)

Comment 6 John Helmert III archtester

2022-01-31 05:34:58 UTC

All done! \o/