BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
Build Time
2025-01-24 16:47:06
Build Host
builder-iso-x86-01.inferitos.ru
Summary
A WebKit (Blink) powered web browser that Google doesn't want you to use
Repositories
Extras
Description
Chromium is an open-source web browser, powered by WebKit (Blink).
Chromium GOST patches are integrated, this Chromium supports GOST TLS
if proprietary CryptoPro is installed.
* Fri Jan 24 2025 Arkady L. Shane <tigro@msvsphere-os.ru> - 132.0.6834.110-1.inferit
- Update to 132.0.6834.110
* High CVE-2025-0611: Object corruption in V8
* High CVE-2025-0612: Out of bounds memory access in V8
* Fri Jan 17 2025 Arkady L. Shane <tigro@msvsphere-os.ru> - 132.0.6834.83-1.inferit
- Update to 132.0.6834.83
* High CVE-2025-0434: Out of bounds memory access in V8
* High CVE-2025-0435: Inappropriate implementation in Navigation
* High CVE-2025-0436: Integer overflow in Skia
* High CVE-2025-0437: Out of bounds read in Metrics
* High CVE-2025-0438: Stack buffer overflow in Tracing
* Medium CVE-2025-0439: Race in Frames
* Medium CVE-2025-0440: Inappropriate implementation in Fullscreen
* Medium CVE-2025-0441: Inappropriate implementation in Fenced
* Medium CVE-2025-0442: Inappropriate implementation in Payments
* Medium CVE-2025-0443: Insufficient data validation in Extensions
* Low CVE-2025-0446: Inappropriate implementation in Extensions
* Low CVE-2025-0447: Inappropriate implementation in Navigation
* Low CVE-2025-0448: Inappropriate implementation in Compositing
* Thu Jan 09 2025 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.264-1.inferit
- Update to 131.0.6778.264
* High CVE-2025-0291: Type Confusion in V8
* Fri Dec 20 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.204-1.inferit
* High CVE-2024-12692: Type Confusion in V8
* High CVE-2024-12693: Out of bounds memory access in V8
* High CVE-2024-12694: Use after free in Compositing
* High CVE-2024-12695: Out of bounds write in V8
* Thu Dec 12 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.139-1.inferit
- Update to 131.0.6778.139
* High CVE-2024-12381: Type Confusion in V8
* High CVE-2024-12382: Use after free in Translate
* Thu Dec 05 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.108-1.inferit
- Update to 131.0.6778.108
* High CVE-2024-12053: Type Confusion in V8
- Enable Vulkan for intel graphic driver by default
* Thu Nov 28 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.85-1.inferit.1
- Rebuilt against new dav1d
* Wed Nov 20 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.85-1.inferit
- Update to 131.0.6778.85
* High CVE-2024-11395: Type Confusion in V8
* Tue Nov 12 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 131.0.6778.69-1.inferit
- Update to 131.0.6778.69
* High CVE-2024-11110: Inappropriate implementation in Blink
* Medium CVE-2024-11111: Inappropriate implementation in Autofill
* Medium CVE-2024-11112: Use after free in Media
* Medium CVE-2024-11113: Use after free in Accessibility
* Medium CVE-2024-11114: Inappropriate implementation in Views
* Medium CVE-2024-11115: Insufficient policy enforcement in Navigation
* Medium CVE-2024-11116: Inappropriate implementation in Paint
* Low CVE-2024-11117: Inappropriate implementation in FileSystem
* Mon Nov 11 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 130.0.6723.116-1.inferit
- Update to 130.0.6723.116
* High CVE-2024-10826: Use after free in Family Experience
* High CVE-2024-10827: Use after free in Serial
