-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2025-f3ae92c0bb 2025-08-09 02:06:35.250895+00:00 --------------------------------------------------------------------------------
Name : chromium Product : Fedora EPEL 10.1 Version : 139.0.7258.66 Release : 1.el10_1 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Updated to 139.0.7258.66 * CVE-2025-8576: Use after free in Extensions * CVE-2025-8578: Use after free in Cast * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome * CVE-2025-8580: Inappropriate implementation in Filesystems * CVE-2025-8581: Inappropriate implementation in Extensions * CVE-2025-8582: Insufficient validation of untrusted input in DOM * CVE-2025-8583: Inappropriate implementation in Permissions -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 5 2025 Than Ngo <[email protected]> - 139.0.7258.66-1 - Updated to 139.0.7258.66 * CVE-2025-8576: Use after free in Extensions * CVE-2025-8578: Use after free in Cast * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome * CVE-2025-8580: Inappropriate implementation in Filesystems * CVE-2025-8581: Inappropriate implementation in Extensions * CVE-2025-8582: Insufficient validation of untrusted input in DOM * CVE-2025-8583: Inappropriate implementation in Permissions * Mon Aug 4 2025 Tom Stellard <[email protected]> - 138.0.7204.183-2 - Backport fix for build failure with clang-21 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2386895 - Update chromium to 139.0.7258.66 https://bugzilla.redhat.com/show_bug.cgi?id=2386895 [ 2 ] Bug #2387025 - CVE-2025-8583 chromium: Inappropriate implementation in Permissions in Google Chrome [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387025 [ 3 ] Bug #2387026 - CVE-2025-8583 chromium: Inappropriate implementation in Permissions in Google Chrome [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387026 [ 4 ] Bug #2387027 - CVE-2025-8580 chromium: Inappropriate implementation in Filesystems in Google Chrome [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387027 [ 5 ] Bug #2387028 - CVE-2025-8580 chromium: Inappropriate implementation in Filesystems in Google Chrome [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387028 [ 6 ] Bug #2387029 - CVE-2025-8582 chromium: Insufficient validation of untrusted input in Core in Google Chrome [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387029 [ 7 ] Bug #2387031 - CVE-2025-8582 chromium: Insufficient validation of untrusted input in Core in Google Chrome [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387031 [ 8 ] Bug #2387032 - CVE-2025-8577 chromium: Inappropriate implementation in Picture In Picture in Google Chrome [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387032 [ 9 ] Bug #2387033 - CVE-2025-8577 chromium: Inappropriate implementation in Picture In Picture in Google Chrome [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387033 [ 10 ] Bug #2387034 - CVE-2025-8576 chromium: Use after free in Extensions in Google Chrome [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387034 [ 11 ] Bug #2387035 - CVE-2025-8576 chromium: Use after free in Extensions in Google Chrome [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2387035 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update chromium' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ epel-package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
