Reproed, crash is deep inside of WebKit. As this isn't Valve code there will likely be a delay, potentially long, before we get a fix.
We might have a fix for this, it'll go out in a future client.
Today's client beta has the fix.
Thanks for fix.
Nothing extracted yet.
I have AMD64 Gentoo, Steam with beta updates enabled.
Steps to reproduce crash:
I have some crash messages in end of dmesg: