Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 932394 (CVE-2024-5157, CVE-2024-5158, CVE-2024-5159, CVE-2024-5160) - www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www-client/opera: multiple vulnerabilities
Summary: www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www...
Alias: CVE-2024-5157, CVE-2024-5158, CVE-2024-5159, CVE-2024-5160
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Depends on: 932404 932843
  Show dependency tree
Reported: 2024-05-22 01:41 UTC by Matt Jolly
Modified: 2024-05-28 01:46 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2024-05-22 01:41:49 UTC
The Stable channel has been updated to 125.0.6422.76 for Linux which will roll out over the coming days/weeks.

This update includes 6 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$11000][336012573] High CVE-2024-5157: Use after free in Scheduling. Reported by Looben Yang on 2024-04-21

[$10000][338908243] High CVE-2024-5158: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy) on 2024-05-06

[$5000][335613092] High CVE-2024-5159: Heap buffer overflow in ANGLE. Reported by David Sievers (@loknop) on 2024-04-18

[TBD][338161969] High CVE-2024-5160: Heap buffer overflow in Dawn. Reported by wgslfuzz on 2024-05-01
Comment 1 Larry the Git Cow gentoo-dev 2024-05-22 07:12:50 UTC
The bug has been referenced in the following commit(s):

commit 03fea126119189e9b63f216aaf4cc3ed27191a81
Author:     Matt Jolly <>
AuthorDate: 2024-05-22 04:34:59 +0000
Commit:     Matt Jolly <>
CommitDate: 2024-05-22 07:12:33 +0000

    www-client/chromium: add 125.0.6422.76
    Signed-off-by: Matt Jolly <>

 www-client/chromium/Manifest                      |    1 +
 www-client/chromium/chromium-125.0.6422.76.ebuild | 1453 +++++++++++++++++++++
 2 files changed, 1454 insertions(+)
Comment 2 Matt Jolly gentoo-dev 2024-05-22 07:14:35 UTC
Google chrome was updated in d0158f1a2ec44f65063f4679b37c5285642d632e but I transposed digits in the bug number.