Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 43: Addressing Chromium's Critical Type Confusion & Buffer Overflow

fedora
Calendar Grey September 25, 2025
Dist Fedora Esm H88
Essential patches for Fedora 43 Firefox address significant threats posed by memory corruption and data mismanagement flaws.
- Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buf...

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

- Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buffer overflow in ANGLE

Topics%20covered

Topics Covered

security advisory fedora buffer overflow browser type confusion WebRTC

Change Log

* Wed Sep 17 2025 Than Ngo - 140.0.7339.185-1 - Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buffer overflow in ANGLE

References


[ 1 ] Bug #2397662 - CVE-2025-10585 chromium: Google Chromium V8 Type Confusion Vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2397662

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-2cec357f64' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 43
Version: 140.0.7339.185
Release: 1.fc43
URL: http://www.chromium.org/Home
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Topics%20covered

Topics Covered

security advisory fedora buffer overflow browser type confusion WebRTC

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here