Gentoo alert 202609-01 (Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi)
| From: | glsamaker@gentoo.org | |
| To: | gentoo-announce@lists.gentoo.org | |
| Subject: | [gentoo-announce] [ GLSA 202609-01 ] Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities | |
| Date: | Tue, 01 Sep 2026 20:38:46 -0000 | |
| Message-ID: | <178829512674.1.12638966612138667783@3487e0ce30f3> |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202609-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Date: September 01, 2026 Bugs: #955099, #955603, #956400, #956774, #957076, #957812, #958374, #959112, #959355 ID: 202609-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Background ========== Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you. Affected packages ================= Package Vulnerable Unaffected ------------------------- --------------- ---------------- www-client/chromium < 138.0.7204.92 >= 138.0.7204.92 www-client/google-chrome < 138.0.7204.92 >= 138.0.7204.92 www-client/microsoft-edge < 138.0.3351.65 >= 138.0.3351.65 www-client/opera < 122.0.5643.17 >= 122.0.5643.17 www-client/vivaldi < 7.5.3735.44 >= 7.5.3735.44 Description =========== Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-138.0.7204.92" All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-138.0.7204.92" All Microsoft Edge users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-138.0.3351.65" All Opera users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-122.0.5643.17" All Vivaldi users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.5.3735.44" References ========== [ 1 ] CVE-2025-4050 https://nvd.nist.gov/vuln/detail/CVE-2025-4050 [ 2 ] CVE-2025-4051 https://nvd.nist.gov/vuln/detail/CVE-2025-4051 [ 3 ] CVE-2025-4052 https://nvd.nist.gov/vuln/detail/CVE-2025-4052 [ 4 ] CVE-2025-4096 https://nvd.nist.gov/vuln/detail/CVE-2025-4096 [ 5 ] CVE-2025-4372 https://nvd.nist.gov/vuln/detail/CVE-2025-4372 [ 6 ] CVE-2025-5063 https://nvd.nist.gov/vuln/detail/CVE-2025-5063 [ 7 ] CVE-2025-5064 https://nvd.nist.gov/vuln/detail/CVE-2025-5064 [ 8 ] CVE-2025-5065 https://nvd.nist.gov/vuln/detail/CVE-2025-5065 [ 9 ] CVE-2025-5066 https://nvd.nist.gov/vuln/detail/CVE-2025-5066 [ 10 ] CVE-2025-5067 https://nvd.nist.gov/vuln/detail/CVE-2025-5067 [ 11 ] CVE-2025-5068 https://nvd.nist.gov/vuln/detail/CVE-2025-5068 [ 12 ] CVE-2025-5280 https://nvd.nist.gov/vuln/detail/CVE-2025-5280 [ 13 ] CVE-2025-5281 https://nvd.nist.gov/vuln/detail/CVE-2025-5281 [ 14 ] CVE-2025-5283 https://nvd.nist.gov/vuln/detail/CVE-2025-5283 [ 15 ] CVE-2025-5419 https://nvd.nist.gov/vuln/detail/CVE-2025-5419 [ 16 ] CVE-2025-5958 https://nvd.nist.gov/vuln/detail/CVE-2025-5958 [ 17 ] CVE-2025-5959 https://nvd.nist.gov/vuln/detail/CVE-2025-5959 [ 18 ] CVE-2025-6191 https://nvd.nist.gov/vuln/detail/CVE-2025-6191 [ 19 ] CVE-2025-6192 https://nvd.nist.gov/vuln/detail/CVE-2025-6192 [ 20 ] CVE-2025-6554 https://nvd.nist.gov/vuln/detail/CVE-2025-6554 [ 21 ] CVE-2025-6555 https://nvd.nist.gov/vuln/detail/CVE-2025-6555 [ 22 ] CVE-2025-6556 https://nvd.nist.gov/vuln/detail/CVE-2025-6556 [ 23 ] CVE-2025-6557 https://nvd.nist.gov/vuln/detail/CVE-2025-6557 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202609-01 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2026 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmqXN9YbFIAAAAAABAAO bWFudTIsMi41KzEuMTIsMiwyAAoJEBTEJDmlcvvZCkQP/3W5C0CFzPp8A6vzKllh 0sxKRaK4jmhOKrQCogvcaGdqf/8PcLcLeUf5x2Eyfx/Z+JNszLLDWSRACwVtke6z 6ou0hv1t0hcJk71bajx6BiKv8gybpxXUEeWVz3jOoP5KalG23rDny77dn/aJjSP2 60v0ZPJtKAf79wZT32a54CH9FpRd7F+bjbkq44dNy76CzGLnUAAZm84Y036K/x0X nS8VhRMleTt1tkSkX/BoR2GCD230C0NdYkRb5zoNVhm/1ibCTH86/HS8nH041ONe jokkCDaKcUeBTNS4rhj48FP/Ha35TGhD17Ypk01y0SC9Ryp58IwQQepfzG4V1N7q 3oZRknrxftizNhBKBWqFt60GbA/bA6DhmzTdRQFYUjh0rowP1BEbbGoEmXuZA22+ NjStWtfgyHHj0qrjc2RHDT0IPJCIoD9Mh43If+uyUiQ9a8LkcZJcA/+Uq9hxYFhg nuEW7rEdpW+fGGjFrPrY8pYnNdtasz858mStNLKDjnQezcnNwdH99BlUFNWIJ8FH V8dBxCuleWtTg4lEcws4YdIV74rwf8Q+1IrscA9YlKnlEVjaNvVBWNMVETSBV/sL KFORp2VG9/GjFs6lLC7PYZiglkwtY/hlfdmDeA//vlvWVdevKzQRtCjt+cRftm4k i7a18H3QMUJoNXhTmz8KD2YE =Belj -----END PGP SIGNATURE-----