Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2025:20037-1

Опубликовано: 10 нояб. 2025
Источник: suse-cvrf

Описание

Security update for chromium

This update for chromium fixes the following issues:

Chromium 142.0.7444.134 (boo#1253089):

  • CVE-2025-12725: Out of bounds write in WebGPU
  • CVE-2025-12726: Inappropriate implementation in Views
  • CVE-2025-12727: Inappropriate implementation in V8
  • CVE-2025-12728: Inappropriate implementation in Omnibox
  • CVE-2025-12729: Inappropriate implementation in Omnibox

Список пакетов

openSUSE Leap 16.0
chromedriver-142.0.7444.59-bp160.1.1
chromium-142.0.7444.59-bp160.1.1

Ссылки

Описание

Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
openSUSE Leap 16.0:chromedriver-142.0.7444.59-bp160.1.1
openSUSE Leap 16.0:chromium-142.0.7444.59-bp160.1.1
Ссылки

Описание

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
openSUSE Leap 16.0:chromedriver-142.0.7444.59-bp160.1.1
openSUSE Leap 16.0:chromium-142.0.7444.59-bp160.1.1
Ссылки

Описание

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
openSUSE Leap 16.0:chromedriver-142.0.7444.59-bp160.1.1
openSUSE Leap 16.0:chromium-142.0.7444.59-bp160.1.1
Ссылки

Описание

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Затронутые продукты
openSUSE Leap 16.0:chromedriver-142.0.7444.59-bp160.1.1
openSUSE Leap 16.0:chromium-142.0.7444.59-bp160.1.1
Ссылки

Описание

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Затронутые продукты
openSUSE Leap 16.0:chromedriver-142.0.7444.59-bp160.1.1
openSUSE Leap 16.0:chromium-142.0.7444.59-bp160.1.1
Ссылки