Bug 958374 (CVE-2025-6191, CVE-2025-6192)

Summary:	<www-client/chromium-137.0.7151.119, <www-client/google-chrome-137.0.7151.119, www-client/microsoft-edge, www-client/opera: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	Matt Jolly <kangie>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	chromium, kangie
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_17.html
Whiteboard:
Package list:		Runtime testing required:	---

Description Matt Jolly gentoo-dev

2025-06-18 14:02:54 UTC

The Stable channel has been updated to 137.0.7151.119 for Linux 

[$7000][420697404] High CVE-2025-6191: Integer overflow in V8. Reported by Shaheen Fazim on 2025-05-27

[$4000][421471016] High CVE-2025-6192: Use after free in Profiler. Reported by Chaoyuan Peng (@ret2happy) on 2025-05-31

Comment 1 Larry the Git Cow gentoo-dev

2025-06-18 15:17:37 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fedb94bb0f47d1d046144907578346e37a51b47a

commit fedb94bb0f47d1d046144907578346e37a51b47a
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-06-18 15:05:21 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-06-18 15:13:21 +0000

    www-client/google-chrome: automated update (137.0.7151.119)
    
    Bug: https://bugs.gentoo.org/958374
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...chrome-137.0.7151.103.ebuild => google-chrome-137.0.7151.119.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=27136fd0a5643f20e715b3c46fa2b202a3c8288e

commit 27136fd0a5643f20e715b3c46fa2b202a3c8288e
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-06-18 14:51:44 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-06-18 14:53:41 +0000

    www-client/chromium: add 137.0.7151.119
    
    Bug: https://bugs.gentoo.org/958374
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-137.0.7151.119.ebuild | 1582 ++++++++++++++++++++
 2 files changed, 1584 insertions(+)

Comment 2 Matt Jolly gentoo-dev

2025-06-18 15:49:06 UTC

Version information added based on committed packages:

www-client/google-chrome:
  - 137.0.7151.119 (commit fedb94bb)

www-client/chromium:
  - 137.0.7151.119 (commit fedb94bb)

Versions determined from Larry the Git Cow commit notifications.