Gentoo alert 202608-29 (Chromium, Google Chrome, Microsoft Edge, Opera)
| From: | glsamaker@gentoo.org | |
| To: | gentoo-announce@lists.gentoo.org | |
| Subject: | [gentoo-announce] [ GLSA 202608-29 ] Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities | |
| Date: | Thu, 27 Aug 2026 08:31:25 -0000 | |
| Message-ID: | <178781948613.1.12301145328765301930@3487e0ce30f3> |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202608-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities Date: August 27, 2026 Bugs: #939217, #939451, #939801, #940208, #940637, #941186, #941989, #944072 ID: 202608-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera. Background ========== Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Affected packages ================= Package Vulnerable Unaffected ------------------------- --------------- ---------------- www-client/chromium < 131.0.6778.85 >= 131.0.6778.85 www-client/google-chrome < 131.0.6778.85 >= 131.0.6778.85 www-client/microsoft-edge < 131.0.2903.63 >= 131.0.2903.63 www-client/opera < 116.0.5366.21 >= 116.0.5366.21 Description =========== Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-131.0.6778.85" All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-131.0.6778.85" All Microsoft Edge users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-131.0.2903.63" All Opera users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-116.0.5366.21" References ========== [ 1 ] CVE-2024-7025 https://nvd.nist.gov/vuln/detail/CVE-2024-7025 [ 2 ] CVE-2024-7970 https://nvd.nist.gov/vuln/detail/CVE-2024-7970 [ 3 ] CVE-2024-8362 https://nvd.nist.gov/vuln/detail/CVE-2024-8362 [ 4 ] CVE-2024-8636 https://nvd.nist.gov/vuln/detail/CVE-2024-8636 [ 5 ] CVE-2024-8637 https://nvd.nist.gov/vuln/detail/CVE-2024-8637 [ 6 ] CVE-2024-8638 https://nvd.nist.gov/vuln/detail/CVE-2024-8638 [ 7 ] CVE-2024-8639 https://nvd.nist.gov/vuln/detail/CVE-2024-8639 [ 8 ] CVE-2024-8904 https://nvd.nist.gov/vuln/detail/CVE-2024-8904 [ 9 ] CVE-2024-8905 https://nvd.nist.gov/vuln/detail/CVE-2024-8905 [ 10 ] CVE-2024-8906 https://nvd.nist.gov/vuln/detail/CVE-2024-8906 [ 11 ] CVE-2024-8907 https://nvd.nist.gov/vuln/detail/CVE-2024-8907 [ 12 ] CVE-2024-8908 https://nvd.nist.gov/vuln/detail/CVE-2024-8908 [ 13 ] CVE-2024-8909 https://nvd.nist.gov/vuln/detail/CVE-2024-8909 [ 14 ] CVE-2024-9121 https://nvd.nist.gov/vuln/detail/CVE-2024-9121 [ 15 ] CVE-2024-9122 https://nvd.nist.gov/vuln/detail/CVE-2024-9122 [ 16 ] CVE-2024-9123 https://nvd.nist.gov/vuln/detail/CVE-2024-9123 [ 17 ] CVE-2024-9369 https://nvd.nist.gov/vuln/detail/CVE-2024-9369 [ 18 ] CVE-2024-9370 https://nvd.nist.gov/vuln/detail/CVE-2024-9370 [ 19 ] CVE-2024-9602 https://nvd.nist.gov/vuln/detail/CVE-2024-9602 [ 20 ] CVE-2024-9603 https://nvd.nist.gov/vuln/detail/CVE-2024-9603 [ 21 ] CVE-2024-10229 https://nvd.nist.gov/vuln/detail/CVE-2024-10229 [ 22 ] CVE-2024-10230 https://nvd.nist.gov/vuln/detail/CVE-2024-10230 [ 23 ] CVE-2024-10231 https://nvd.nist.gov/vuln/detail/CVE-2024-10231 [ 24 ] CVE-2024-11395 https://nvd.nist.gov/vuln/detail/CVE-2024-11395 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202608-29 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2026 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmqP9d0bFIAAAAAABAAO bWFudTIsMi41KzEuMTIsMiwyAAoJEBTEJDmlcvvZo+YQAKXG/5mfNPpwf49bYBvx 8xBU0n3H3ge4VVdHui1r1JsIZBCaU/ul/YqxUaVTuNULVnxhSHH1PBM/7GQMnrQ4 X6ssmO1jEHiO4NdzSDK36iN/0EJHS7opNhVBmQQZMPMg/J0Kzwc9zm4jA0A0KT31 juso0AV/PnGBg1r+quCapoNrE8zsbdwuNCO5yU5cVPixj4Ij+39ButVzGIyLJtf0 f/4CJWDIvHQEW20GK7uoj+ubSA+YpMA5ZGqU0a7/WC1Rj+MfYp5jra9EPeiEEH/h YfIXjzg8uAzd9D0iIrJudSfKrXKUfrLXsujPVO8Q1zy5WJFiZ9zMyFMbq6mkkwhY Bm9yfKqX/bzziomKK9VSfVN0R5IaU6s8M4ounVnJEt6Kb6GDQUczPgW4xTBUl58R 4WsbamjVgAnCERtTRs1OG+lDsEUthax2cK9c6w4rqxVO7rv3Kve7UBK1yAwr3waR ytlZirIHlnnfG2tYzqb3txC7Fl30Q0TN20yWnW+k+iI43llVnJyh+FpfM9m2Zb6t vGmnGpnhl4JcIpap1mA0A2EyDEnW9T3+ytcpx3/E4GjqQ/Dr9vTrr1IVCgG3EV/w XlbUiHSr6tL4YZ4NpR+CIjGSVmOHGDszRKOU6y0VyHfxEDbSBB/w/CmAL94A+2vJ WuesL8N8shYR+lZEE31J0sAB =gFzm -----END PGP SIGNATURE-----