Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42: chromium 2025-7f3fdc548a critical: implementation issues

fedora
Calendar Grey June 2, 2025
Dist Fedora Esm H88
Significant announcement regarding Fedora 42 chromium addressing multiple security flaws including use-after-free issues and out-of-bounds write errors.
Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Background Fetch API CV...

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Background Fetch API CVE-2025-5065: Inappropriate implementation in FileSystemAccess API CVE-2025-5066: Inappropriate implementation in Messages CVE-2025-5281: Inappropriate implementation in BFCache CVE-2025-5283: Use after free in libvpx CVE-2025-5067: Inappropriate implementation in Tab Strip

Change Log

* Tue May 27 2025 Than Ngo - 137.0.7151.55-1 - Update to 137.0.7151.55 * CVE-2025-5063: Use after free in Compositing * CVE-2025-5280: Out of bounds write in V8 * CVE-2025-5064: Inappropriate implementation in Background Fetch API * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API * CVE-2025-5066: Inappropriate implementation in Messages * CVE-2025-5281: Inappropriate implementation in BFCache * CVE-2025-5283: Use after free in libvpx * CVE-2025-5067: Inappropriate implementation in Tab Strip - Fix FTBFS caused by simdutf and pdfium-png_decoder - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream - Refresh ppc64le patches - Enable system simdutf for F43 * Tue May 27 2025 Jitka Plesnikova - 136.0.7103.113-2 - Rebuilt for flac 1.5.0

References

Fedora Update Notification FEDORA-2025-7f3fdc548a 2025-06-02 01:16:42.779682+00:00 Name : chromium Product : Fedora 42 Version : 137.0.7151.55 Release : 1.fc42 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-7f3fdc548a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 42
Version: 137.0.7151.55
Release: 1.fc42
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here