ALT Linux Team

Branch sisyphus_loongarch64 update on 2025-09-25

2025-09-25

ALT-BU-2025-12360-1

Branch sisyphus_loongarch64 update bulletin.

ALT-PU-2025-12357-1

Package kweathercore updated to version 25.08.1-alt2 for branch sisyphus_loongarch64.

Closed bugs

Bug #56145

Wrong description

ALT-PU-2025-12359-1

Package chromium updated to version 140.0.7339.207-alt0.port for branch sisyphus_loongarch64.

Closed vulnerabilities

Published: 2025-09-24
Modified: 2025-09-25

CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Severity: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References:
Published: 2025-09-24
Modified: 2025-09-25

CVE-2025-10891

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2025-09-24
Modified: 2025-09-25

CVE-2025-10892

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top