Pull request for security update for chromium #202

Manually merged
products merged 1 commits from msmeissn/PackageHub:maintenance-update-1761811721 into leap-16.0 2025-10-31 10:47:55 +01:00
2 changed files with 57 additions and 1 deletions

View File

@@ -0,0 +1,56 @@
<patchinfo>
<issue tracker="cve" id="2025-12441"/>
<issue tracker="cve" id="2025-12429"/>
<issue tracker="cve" id="2025-12431"/>
<issue tracker="cve" id="2025-12444"/>
<issue tracker="cve" id="2025-12428"/>
<issue tracker="cve" id="2025-12438"/>
<issue tracker="cve" id="2025-12435"/>
<issue tracker="cve" id="2025-12437"/>
<issue tracker="cve" id="2025-12443"/>
<issue tracker="cve" id="2025-12430"/>
<issue tracker="cve" id="2025-12440"/>
<issue tracker="cve" id="2025-12445"/>
<issue tracker="cve" id="2025-12446"/>
<issue tracker="cve" id="2025-12432"/>
<issue tracker="cve" id="2025-12436"/>
<issue tracker="cve" id="2025-12434"/>
<issue tracker="cve" id="2025-54874">VUL-0: CVE-2025-54874: TRACKERBUG: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of-bounds heap</issue>
<issue tracker="cve" id="2025-12433"/>
<issue tracker="bnc" id="1252881">VUL-0: chromium: release 142.0.7444.59</issue>
<issue tracker="cve" id="2025-12439"/>
<issue tracker="cve" id="2025-12447"/>
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 142.0.7444.59, the stable channel promotion of 142.
Security fixes (boo#1252881):
* CVE-2025-12428: Type Confusion in V8
* CVE-2025-12429: Inappropriate implementation in V8
* CVE-2025-12430: Object lifecycle issue in Media
* CVE-2025-12431: Inappropriate implementation in Extensions
* CVE-2025-12432: Race in V8
* CVE-2025-12433: Inappropriate implementation in V8
* CVE-2025-12434: Race in Storage
* CVE-2025-12435: Incorrect security UI in Omnibox
* CVE-2025-12436: Policy bypass in Extensions
* CVE-2025-12437: Use after free in PageInfo
* CVE-2025-12438: Use after free in Ozone
* CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
* CVE-2025-12440: Inappropriate implementation in Autofill
* CVE-2025-12441: Out of bounds read in V8
* CVE-2025-12443: Out of bounds read in WebXR
* CVE-2025-12444: Incorrect security UI in Fullscreen UI
* CVE-2025-12445: Policy bypass in Extensions
* CVE-2025-12446: Incorrect security UI in SplitView
* CVE-2025-12447: Incorrect security UI in Omnibox
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>