Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: chromium 2025-4ad8f5e805 critical: Site Isolation use after free

fedora
Calendar Grey April 13, 2025
Dist Fedora Esm H88
Fedora 40 enhances chromium to resolve a problem concerning Site Isolation, tackling a use after free vulnerability.
Update to 135.0.7049.84 * CVE-2025-3066: Use after free in Site Isolation

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to 135.0.7049.84 * CVE-2025-3066: Use after free in Site Isolation

Topics%20covered

Topics Covered

security advisory Fedora web browser chromium use after free Site Isolation

Change Log

* Wed Apr 9 2025 Than Ngo - 135.0.7049.84-1 - Update to 135.0.7049.84 * CVE-2025-3066: Use after free in Site Isolation

References


[ 1 ] Bug #2357598 - headless Chromium locks up trying to process some (not all) images https://bugzilla.redhat.com/show_bug.cgi?id=2357598

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4ad8f5e805' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 40
Version: 135.0.7049.84
Release: 1.fc40
URL: http://www.chromium.org/Home
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Topics%20covered

Topics Covered

security advisory Fedora web browser chromium use after free Site Isolation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here