Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 40: FEDORA-2025-b1804b97fc critical: chromium memory issues

fedora
Calendar Grey May 4, 2025
Dist Fedora Esm H88
Important announcement regarding Fedora 40's Chromium browser introducing significant security improvements to address various weaknesses.
Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data validation in DevTools C...

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data validation in DevTools CVE-2025-4052: Inappropriate implementation in DevTools

Change Log

* Tue Apr 29 2025 Than Ngo - 136.0.7103.59-1 - Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient data validation in DevTools * CVE-2025-4052: Inappropriate implementation in DevTools * Thu Apr 24 2025 Than Ngo - 136.0.7103.48-1 - Update to 136.0.7103.48

References

Fedora Update Notification FEDORA-2025-b1804b97fc 2025-05-04 01:43:02.601141+00:00 Name : chromium Product : Fedora 40 Version : 136.0.7103.59 Release : 1.fc40 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b1804b97fc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 40
Version: 136.0.7103.59
Release: 1.fc40
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here