Back Linuxsecurity Fedora 43: Chromium Critical Update for V8 Issues FEDORA-2025
Chromium is an open-source web browser, powered by WebKit (Blink). Update Information : Update to 142.0.7444.59 * High CVE-2025-12428: Type Confusion in V8 * High CVE-2025-12429: Inappropriate implementation in V8 * High CVE-2025-12430: Object lifecycle issue in Media * High CVE-2025-12431: Inappropriate implementation in Extensions * High CVE-2025-12432: Race in V8 * High CVE-2025-12433: Inappropriate implementation in V8 * High CVE-2025-12036: Inappropriate implementation in V8 * Medium CVE-2025-12434: Race in Storage * Medium CVE-2025-12435: Incorrect security UI in Omnibox * Medium CVE-2025-12436: Policy bypass in Extensions * Medium CVE-2025-12437: Use after free in PageInfo * Medium CVE-2025-12438: Use after free in Ozone * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption * Low CVE-2025-12440: Inappropriate implementation in Autofill * Medium CVE-2025-12441: Out of bounds read in V8 * Medium CVE-2025-12443: Out of bounds read in WebXR * Low CVE-2025-12...
Chromium is an open-source web browser, powered by WebKit (Blink).
Update to 142.0.7444.59 * High CVE-2025-12428: Type Confusion in V8 * High CVE-2025-12429: Inappropriate implementation in V8 * High CVE-2025-12430: Object lifecycle issue in Media * High CVE-2025-12431: Inappropriate implementation in Extensions * High CVE-2025-12432: Race in V8 * High CVE-2025-12433: Inappropriate implementation in V8 * High CVE-2025-12036: Inappropriate implementation in V8 * Medium CVE-2025-12434: Race in Storage * Medium CVE-2025-12435: Incorrect security UI in Omnibox * Medium CVE-2025-12436: Policy bypass in Extensions * Medium CVE-2025-12437: Use after free in PageInfo * Medium CVE-2025-12438: Use after free in Ozone * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption * Low CVE-2025-12440: Inappropriate implementation in Autofill * Medium CVE-2025-12441: Out of bounds read in V8 * Medium CVE-2025-12443: Out of bounds read in WebXR * Low CVE-2025-12...
* Thu Oct 30 2025 Than Ngo - 142.0.7444.59-1 - Update to 142.0.7444.59 * Refreshed ppc64le patches * Refreshed system-brotli patch * Refreshed clang++-unknown-argument patch * Refreshed split-threshold-for-reg-with-hint patch * Fixed some FTBFS caused by missing header files * Fixed FTBFS caused by old rust compiler * Fixed FTBFS caused by new glibc-2.42 in Rawhide * Fixed FTBFS caused by old python-3.9.x in EL8/9 * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9
* Thu Oct 30 2025 Than Ngo - 142.0.7444.59-1 - Update to 142.0.7444.59 * Refreshed ppc64le patches * Refreshed system-brotli patch * Refreshed clang++-unknown-argument patch * Refreshed split-threshold-for-reg-with-hint patch * Fixed some FTBFS caused by missing header files * Fixed FTBFS caused by old rust compiler * Fixed FTBFS caused by new glibc-2.42 in Rawhide * Fixed FTBFS caused by old python-3.9.x in EL8/9 * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9
Fedora Update Notification FEDORA-2025-31f0d8bfa9 2025-11-05 02:09:57.817687+00:00 Name : chromium Product : Fedora 43 Version : 142.0.7444.59 Release : 1.fc43 URL : Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).
Fedora Update Notification FEDORA-2025-31f0d8bfa9 2025-11-05 02:09:57.817687+00:00 Name : chromium Product : Fedora 43 Version : 142.0.7444.59 Release : 1.fc43 URL : Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-31f0d8bfa9' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
