Bug 932675 (CVE-2024-5274) – www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www-client/opera: Type Confusion in V8

• Product: Gentoo Security
• Status: CONFIRMED ---

[Description foufou33 2024-05-25 04:19:56 UTC]

according to [1] :
The Stable channel has been updated to 125.0.6422.112/.113 for Windows, Mac and 125.0.6422.112 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

Security Fixes and Rewards

[N/A][341663589] High CVE-2024-5274: Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group and Brendon Tiszka of Chrome Security on 2024-05-20

Google is aware that an exploit for CVE-2024-5274 exists in the wild.


Deian issued a DSA [2]

[1]https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html
[2]https://security-tracker.debian.org/tracker/DSA-5697-1

Reproducible: Always

[Comment 1 Larry the Git Cow 2024-05-27 11:43:25 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c9dd965e1211d24f3f9bea81586993730ff62459

commit c9dd965e1211d24f3f9bea81586993730ff62459
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-05-27 11:36:20 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-05-27 11:41:49 +0000

    www-client/chromium: add 125.0.6422.112
    
    Bug: https://bugs.gentoo.org/932675
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-125.0.6422.112.ebuild | 1447 ++++++++++++++++++++
 2 files changed, 1449 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=be67d996c6eeaf79167e86878ae65cc62ef32acb

commit be67d996c6eeaf79167e86878ae65cc62ef32acb
Author:     Matt Jolly <[e-mail]>
AuthorDate: 2024-05-27 01:12:22 +0000
Commit:     Matt Jolly <[e-mail]>
CommitDate: 2024-05-27 11:41:47 +0000

    www-client/google-chrome: automated update (125.0.6422.112)
    
    Bug: https://bugs.gentoo.org/932675
    Signed-off-by: Matt Jolly <[e-mail]>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-125.0.6422.76.ebuild => google-chrome-125.0.6422.112.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)