Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 948983 (CVE-2025-0762) - <www-client/chromium-132.0.6834.159, <www-client/google-chrome-132.0.6834.159, <www-client/microsoft-edge-132.0.2957.140, <www-client/opera-117.0.5408.35: Use after free in DevTools.
Summary: <www-client/chromium-132.0.6834.159, <www-client/google-chrome-132.0.6834.159...
Status: CONFIRMED
Alias: CVE-2025-0762
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://chromereleases.googleblog.com...
Whiteboard: B2 [glsa]
Keywords:
Depends on: 948984 951689
Blocks:
  Show dependency tree
 
Reported: 2025-01-28 22:27 UTC by Matt Jolly
Modified: 2025-06-16 07:49 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2025-01-28 22:27:53 UTC 
The Stable channel has been updated to 132.0.6834.159 for Linux.

[$2000][384844003] Medium CVE-2025-0762: Use after free in DevTools. Reported by Sakana.S on 2024-12-18
Comment 1 Larry the Git Cow gentoo-dev 2025-01-28 23:28:09 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2d9038cb1f7de03ae37f9607ce7bdc62dd2404fb

commit 2d9038cb1f7de03ae37f9607ce7bdc62dd2404fb
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-01-28 22:37:34 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-01-28 23:26:20 +0000

    www-client/google-chrome: automated update (132.0.6834.159)
    
    Bug: https://bugs.gentoo.org/948983
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-132.0.6834.110.ebuild => google-chrome-132.0.6834.159.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c53b3e80c419b5b94d94523085be6cb0fad8f86c

commit c53b3e80c419b5b94d94523085be6cb0fad8f86c
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-01-28 22:10:09 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-01-28 23:26:19 +0000

    www-client/chromium: add 132.0.6834.159
    
    This commit removes support for QT5 in Gentoo Chromium builds,
    other channels to follow shortly as the required patch has
    been backported.
    
    Bug: https://bugs.gentoo.org/948983
    Bug: https://bugs.gentoo.org/926166
    Bug: https://bugs.gentoo.org/948836
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-132.0.6834.159.ebuild | 1432 ++++++++++++++++++++
 .../chromium/files/chromium-134-qt5-optional.patch |  133 ++
 3 files changed, 1567 insertions(+)
Comment 2 Matt Jolly gentoo-dev 2025-06-11 12:24:01 UTC 
Microsoft Edge CVE fix versions:
  132.0.2957.140: CVE-2025-0762
Comment 3 Matt Jolly gentoo-dev 2025-06-11 14:45:02 UTC 
Opera CVE fix versions (based on Chromium version mapping):
  117.0.5408.35: CVE-2025-0762