openSUSE-SU-2025:0145-1

Chromium 136.0.7103.48 (stable release 2025-04-29) (boo#1242153)
- CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
- CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
- CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fr�jdendahl on 2025-03-1
- CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
bump esbuild from 0.24.0 to 0.25.1
- Fix incorrect paths in inline source maps (#4070, #4075, #4105)
- Fix invalid generated source maps (#4080, #4082, #4104, #4107)
- Fix a regression with non-file source map paths (#4078)
- Update Go from 1.23.5 to 1.23.7 (#4076, #4077)
Chromium 135.0.7049.114 (stable release 2025-04-22)
- stability fixes

References

Affected packages

SUSE:Package Hub 15 SP6 / chromium

Package

Name: chromium
Purl: pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.0.7103.59-bp156.2.113.2

Ecosystem specific

{
    "binaries": [
        {
            "chromedriver": "136.0.7103.59-bp156.2.113.2",
            "chromium": "136.0.7103.59-bp156.2.113.2"
        }
    ]
}

openSUSE:Leap 15.6 / chromium

Package

Name: chromium
Purl: pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.0.7103.59-bp156.2.113.2

Ecosystem specific

{
    "binaries": [
        {
            "chromedriver": "136.0.7103.59-bp156.2.113.2",
            "chromium": "136.0.7103.59-bp156.2.113.2"
        }
    ]
}