Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 932675 (CVE-2024-5274) - www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www-client/opera: Type Confusion in V8
Summary: www-client/chromium, www-client/google-chrome, www-client/microsoft-edge, www...
Status: CONFIRMED
Alias: CVE-2024-5274
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://chromereleases.googleblog.com...
Whiteboard:
Keywords:
Depends on: 932843
Blocks:
  Show dependency tree
 
Reported: 2024-05-25 04:19 UTC by foufou33
Modified: 2024-05-28 01:40 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description foufou33 2024-05-25 04:19:56 UTC
according to [1] :
The Stable channel has been updated to 125.0.6422.112/.113 for Windows, Mac and 125.0.6422.112 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

Security Fixes and Rewards

[N/A][341663589] High CVE-2024-5274: Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group and Brendon Tiszka of Chrome Security on 2024-05-20

Google is aware that an exploit for CVE-2024-5274 exists in the wild.


Deian issued a DSA [2]

[1]https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html
[2]https://security-tracker.debian.org/tracker/DSA-5697-1

Reproducible: Always
Comment 1 Larry the Git Cow gentoo-dev 2024-05-27 11:43:25 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c9dd965e1211d24f3f9bea81586993730ff62459

commit c9dd965e1211d24f3f9bea81586993730ff62459
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-05-27 11:36:20 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-05-27 11:41:49 +0000

    www-client/chromium: add 125.0.6422.112
    
    Bug: https://bugs.gentoo.org/932675
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/chromium/Manifest                       |    2 +
 www-client/chromium/chromium-125.0.6422.112.ebuild | 1447 ++++++++++++++++++++
 2 files changed, 1449 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=be67d996c6eeaf79167e86878ae65cc62ef32acb

commit be67d996c6eeaf79167e86878ae65cc62ef32acb
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-05-27 01:12:22 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-05-27 11:41:47 +0000

    www-client/google-chrome: automated update (125.0.6422.112)
    
    Bug: https://bugs.gentoo.org/932675
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 www-client/google-chrome/Manifest                                       | 2 +-
 ...-chrome-125.0.6422.76.ebuild => google-chrome-125.0.6422.112.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)