--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-7827e4feac
2025-04-23 01:59:45.656616+00:00
--------------------------------------------------------------------------------

Name        : chromium
Product     : Fedora 40
Version     : 135.0.7049.95
Release     : 1.fc40
URL         : http://www.chromium.org/Home
Summary     : A WebKit (Blink) powered web browser that Google doesn't want you 
to use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

Update to 135.0.7049.95
CVE-2025-3619: Heap buffer overflow in Codecs
CVE-2025-3620: Use after free in USB
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr 16 2025 Than Ngo <[email protected]> - 135.0.7049.95-1
- Update to 135.0.7049.95
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2360898 - CVE-2025-3620 chromium: Use after free in USB 
[fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2360898
  [ 2 ] Bug #2360899 - CVE-2025-3620 chromium: Use after free in USB [epel-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2360899
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-7827e4feac' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to