Skip to content
Fedora 41: Chromium High CVE-2025

Fedora 41: Chromium High CVE-2025

Linuxsecurity LinuxSecurity Advisories November 7, 2025

Chromium is an open-source web browser, powered by WebKit (Blink). Update Information : Update to 142.0.7444.59 * High CVE-2025-12428: Type Confusion in V8 * High CVE-2025-12429: Inappropriate implementation in V8 * High CVE-2025-12430: Object lifecycle issue in Media * High CVE-2025-12431: Inappropriate implementation in Extensions * High CVE-2025-12432: Race in V8 * High CVE-2025-12433: Inappropriate implementation in V8 * High CVE-2025-12036: Inappropriate implementation in V8 * Medium CVE-2025-12434: Race in Storage * Medium CVE-2025-12435: Incorrect security UI in Omnibox * Medium CVE-2025-12436: Policy bypass in Extensions * Medium CVE-2025-12437: Use after free in PageInfo * Medium CVE-2025-12438: Use after free in Ozone * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption * Low CVE-2025-12440: Inappropriate implementation in Autofill * Medium CVE-2025-12441: Out of bounds read in V8 * Medium CVE-2025-12443: Out of bounds read in WebXR * Low CVE-2025-12...

Chromium is an open-source web browser, powered by WebKit (Blink).

Update to 142.0.7444.59 * High CVE-2025-12428: Type Confusion in V8 * High CVE-2025-12429: Inappropriate implementation in V8 * High CVE-2025-12430: Object lifecycle issue in Media * High CVE-2025-12431: Inappropriate implementation in Extensions * High CVE-2025-12432: Race in V8 * High CVE-2025-12433: Inappropriate implementation in V8 * High CVE-2025-12036: Inappropriate implementation in V8 * Medium CVE-2025-12434: Race in Storage * Medium CVE-2025-12435: Incorrect security UI in Omnibox * Medium CVE-2025-12436: Policy bypass in Extensions * Medium CVE-2025-12437: Use after free in PageInfo * Medium CVE-2025-12438: Use after free in Ozone * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption * Low CVE-2025-12440: Inappropriate implementation in Autofill * Medium CVE-2025-12441: Out of bounds read in V8 * Medium CVE-2025-12443: Out of bounds read in WebXR * Low CVE-2025-12...

* Thu Oct 30 2025 Than Ngo - 142.0.7444.59-1 - Update to 142.0.7444.59 * Refreshed ppc64le patches * Refreshed system-brotli patch * Refreshed clang++-unknown-argument patch * Refreshed split-threshold-for-reg-with-hint patch * Fixed some FTBFS caused by missing header files * Fixed FTBFS caused by old rust compiler * Fixed FTBFS caused by new glibc-2.42 in Rawhide * Fixed FTBFS caused by old python-3.9.x in EL8/9 * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9

* Thu Oct 30 2025 Than Ngo - 142.0.7444.59-1 - Update to 142.0.7444.59 * Refreshed ppc64le patches * Refreshed system-brotli patch * Refreshed clang++-unknown-argument patch * Refreshed split-threshold-for-reg-with-hint patch * Fixed some FTBFS caused by missing header files * Fixed FTBFS caused by old rust compiler * Fixed FTBFS caused by new glibc-2.42 in Rawhide * Fixed FTBFS caused by old python-3.9.x in EL8/9 * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9

Fedora Update Notification FEDORA-2025-916064e307 2025-11-07 02:35:35.301825+00:00 Name : chromium Product : Fedora 41 Version : 142.0.7444.59 Release : 1.fc41 URL : Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).

Fedora Update Notification FEDORA-2025-916064e307 2025-11-07 02:35:35.301825+00:00 Name : chromium Product : Fedora 41 Version : 142.0.7444.59 Release : 1.fc41 URL : Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-916064e307' at the command line. For more information, refer to the dnf documentation available at