openSUSE: Chromium Important Security Update CVE-2025-9864 CVE-2025-9867
opensuse
September 5, 2025
An update that fixes four vulnerabilities is now available
Description
This update for chromium, gn fixes the following issues:
- Chromium 140.0.7339.80 (boo#1249093):
* new permission prompt for local network access
* CVE-2025-9864: Use after free in V8
* CVE-2025-9865: Inappropriate implementation in Toolbar
* CVE-2025-9866: Inappropriate implementation in Extensions
* CVE-2025-9867: Inappropriate implementation in Downloads
* Various fixes from internal audits, fuzzing and other initiatives
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP7:
zypper in -t patch openSUSE-2025-337=1
Package List
- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):
gn-0.20250619-bp157.2.6.1
gn-debuginfo-0.20250619-bp157.2.6.1
gn-debugsource-0.20250619-bp157.2.6.1
- openSUSE Backports SLE-15-SP7 (aarch64 x86_64):
chromedriver-140.0.7339.80-bp157.2.46.1
chromium-140.0.7339.80-bp157.2.46.1
References
https://www.suse.com/security/cve/CVE-2025-9864.html
https://www.suse.com/security/cve/CVE-2025-9865.html
https://www.suse.com/security/cve/CVE-2025-9866.html
https://www.suse.com/security/cve/CVE-2025-9867.html
https://bugzilla.suse.com/1249093
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2025:0337-1
Rating: important
Affected Products:
openSUSE Backports SLE-15-SP7
.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!