Bug 957812 (CVE-2025-5958, CVE-2025-5959)

Summary:	<www-client/chromium-137.0.7151.103, <www-client/google-chrome-137.0.7151.103, www-client/microsoft-edge, www-client/opera: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	Matt Jolly <kangie>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	chromium, kangie
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	956775
Bug Blocks:

Description Matt Jolly gentoo-dev

2025-06-11 07:10:15 UTC

The Stable channel has been updated to 137.0.7151.103 for Linux.

This update includes 2 security fixes.

[$8000][420150619] High CVE-2025-5958: Use after free in Media. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2025-05-25

[NA][422313191] High CVE-2025-5959: Type Confusion in V8. Reported by Seunghyun Lee as part of TyphoonPWN 2025 on 2025-06-04

Comment 1 Larry the Git Cow gentoo-dev

2025-06-11 09:55:03 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6f2e0f84333bf4587f6a9fa493e8456bb25a9acd

commit 6f2e0f84333bf4587f6a9fa493e8456bb25a9acd
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-06-11 09:39:39 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-06-11 09:53:54 +0000

    www-client/google-chrome: automated update (137.0.7151.103)
    
    Bug: https://bugs.gentoo.org/957812
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-137.0.7151.68.ebuild => google-chrome-137.0.7151.103.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=296e584c459d891119e4afe4e769d79666ef786c

commit 296e584c459d891119e4afe4e769d79666ef786c
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-06-11 07:17:17 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-06-11 09:53:53 +0000

    www-client/chromium: add 137.0.7151.103
    
    Bug: https://bugs.gentoo.org/957812
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-137.0.7151.103.ebuild | 1551 ++++++++++++++++++++
 2 files changed, 1553 insertions(+)