Advisories » MGASA-2025-0091

Updated chromium-browser-stable packages fix security vulnerabilities

Publication date: 08 Mar 2025
Modification date: 08 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-0444 , CVE-2025-0445 , CVE-2025-0451 , CVE-2025-0995 , CVE-2025-0996 , CVE-2025-0997 , CVE-2025-0998 , CVE-2025-0999 , CVE-2025-1426 , CVE-2025-1006 , CVE-2025-1914 , CVE-2025-1915 , CVE-2025-1916 , CVE-2025-1917 , CVE-2025-1918 , CVE-2025-1919 , CVE-2025-1921 , CVE-2025-1922

Description

High CVE-2025-1914: Out of bounds read in V8.
Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted
Directory in DevTools.
Medium CVE-2025-1916: Use after free in Profiles.
Medium CVE-2025-1917: Inappropriate Implementation in Browser UI.
Medium CVE-2025-1918: Out of bounds read in PDFium.
Medium CVE-2025-1919: Out of bounds read in Media.
Medium CVE-2025-1921: Inappropriate Implementation in Media
Low CVE-2025-1922: Inappropriate Implementation in Selection.
Low CVE-2025-1923: Inappropriate Implementation in Permission Prompts.
And more, please see the references.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34012
• https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0444
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0445
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0451
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0995
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0996
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0997
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0998
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0999
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1426
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1006
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1914
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1915
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1916
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1917
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1918
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1919
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1921
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1922

SRPMS

9/tainted

• chromium-browser-stable-134.0.6998.35-1.mga9.tainted