Bug 947700 (CVE-2025-0291)

Summary:	<www-client/chromium-131.0.6778.264, <www-client/google-chrome-131.0.6778.264, www-client/microsoft-edge, www-client/opera: Type confusion in V8
Product:	Gentoo Security	Reporter:	Matt Jolly <kangie>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	chromium, kangie
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop.html
Whiteboard:	A2 [glsa? cleanup]
Package list:		Runtime testing required:	---
Bug Depends on:	947701
Bug Blocks:

Description Matt Jolly gentoo-dev

2025-01-08 03:13:33 UTC

The Stable channel has been updated to 131.0.6778.264 for Linux.

This update includes 4 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$55000][383356864] High CVE-2025-0291: Type Confusion in V8. Reported by Popax21 on 2024-12-11

Comment 1 Larry the Git Cow gentoo-dev

2025-01-08 03:38:17 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=42a33a8f02d385b818badc71899faf44cdef65bc

commit 42a33a8f02d385b818badc71899faf44cdef65bc
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-01-08 03:19:21 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-01-08 03:34:12 +0000

    www-client/google-chrome: automated update (131.0.6778.264)
    
    Bug: https://bugs.gentoo.org/947700
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-131.0.6778.204.ebuild => google-chrome-131.0.6778.264.ebuild} | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6a7c1ff742859c232cac811ec8b71900c5bfe5b9

commit 6a7c1ff742859c232cac811ec8b71900c5bfe5b9
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-01-08 03:17:13 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-01-08 03:31:05 +0000

    www-client/chromium: add 131.0.6778.264
    
    Bug: https://bugs.gentoo.org/947700
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-131.0.6778.264.ebuild | 1422 ++++++++++++++++++++
 2 files changed, 1424 insertions(+)