Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 949698 (CVE-2025-0995, CVE-2025-0996, CVE-2025-0997, CVE-2025-0998) - www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www-client/opera: multiple vulnerabilities
Summary: www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www...
Status: CONFIRMED
Alias: CVE-2025-0995, CVE-2025-0996, CVE-2025-0997, CVE-2025-0998
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://chromereleases.googleblog.com...
Whiteboard:
Keywords:
Depends on: 949700
Blocks:
  Show dependency tree
 
Reported: 2025-02-13 10:33 UTC by Matt Jolly
Modified: 2025-02-13 10:59 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Jolly gentoo-dev 2025-02-13 10:33:01 UTC
The Stable channel has been updated to 133.0.6943.98 for Linux.

[$55000][391907159] High CVE-2025-0995: Use after free in V8. Reported by Popax21 on 2025-01-24

[TBD][391788835] High CVE-2025-0996: Inappropriate implementation in Browser UI. Reported by yuki yamaoto on 2025-01-23

[TBD][391666328] High CVE-2025-0997: Use after free in Navigation. Reported by asnine on 2025-01-23

[TBD][386857213] High CVE-2025-0998: Out of bounds memory access in V8. Reported by Alan Goodman on 2024-12-31
Comment 1 Larry the Git Cow gentoo-dev 2025-02-13 10:59:14 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=453f1c72ac6b09bb3b8bdfb1536a2b40bbc7ec96

commit 453f1c72ac6b09bb3b8bdfb1536a2b40bbc7ec96
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-02-13 10:34:00 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-02-13 10:50:49 +0000

    www-client/google-chrome: automated update (133.0.6943.98)
    
    Bug: https://bugs.gentoo.org/949698
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...e-chrome-133.0.6943.53.ebuild => google-chrome-133.0.6943.98.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=72a385017cae2d98eb3327209744bfde14dca1f3

commit 72a385017cae2d98eb3327209744bfde14dca1f3
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-02-13 10:30:29 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-02-13 10:50:45 +0000

    www-client/chromium: add 133.0.6943.98
    
    Includes the glibc-2.41 patch and updates GN
    to enable PPC via the gentoo patchset.
    
    Raptor Engineering patchset updated and ~ppc64 keyworded.
    
    Bug: https://bugs.gentoo.org/949698
    Bug: https://bugs.gentoo.org/948832
    Bug: https://bugs.gentoo.org/948384
    Bug: https://bugs.gentoo.org/949654
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                      |    4 +
 www-client/chromium/chromium-133.0.6943.98.ebuild | 1441 +++++++++++++++++++++
 2 files changed, 1445 insertions(+)