Advisories » MGASA-2025-0187

Updated chromium-browser-stable packages fix security vulnerabilities

Publication date: 20 Jun 2025
Modification date: 20 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5063 , CVE-2025-5064 , CVE-2025-5065 , CVE-2025-5066 , CVE-2025-5067 , CVE-2025-5068 , CVE-2025-5280 , CVE-2025-5281 , CVE-2025-5283 , CVE-2025-5419 , CVE-2025-5958 , CVE-2025-5959

Description

CVE-2025-5063: Use after free in Compositing.
CVE-2025-5280: Out of bounds write in V8.
CVE-2025-5064: Inappropriate implementation in Background Fetch API.
CVE-2025-5065: Inappropriate implementation in FileSystemAccess API.
CVE-2025-5066: Inappropriate implementation in Messages.
CVE-2025-5281: Inappropriate implementation in BFCache.
CVE-2025-5283: Use after free in libvpx.
CVE-2025-5067: Inappropriate implementation in Tab Strip.
CVE-2025-5419: Out of bounds read and write in V8.
CVE-2025-5068: Use after free in Blink.
CVE-2025-5958: Use after free in Media.
CVE-2025-5959: Type Confusion in V8.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34340
• https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html
• https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html
• https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_10.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5063
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5064
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5065
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5066
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5067
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5068
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5280
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5281
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5283
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5419
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5958
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5959

SRPMS

9/tainted

• chromium-browser-stable-136.0.7103.113-2.mga9.tainted