openSUSE-SU-2025:0120-1: important: Security update for chromium

openSUSE Security Update: Security update for chromium
_______________________________

Announcement ID: openSUSE-SU-2025:0120-1
Rating: important
References: #1238826 #1239780 #1240968
Cross-References: CVE-2025-3066
Affected Products:
openSUSE Backports SLE-15-SP6
_______________________________

An update that solves one vulnerability and has two fixes
is now available.

Description:

This update for chromium fixes the following issues:

- Chromium 135.0.7049.84 (stable release 2025-04-08) (boo#1240968)

* CVE-2025-3066: Use after free in Site Isolation

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP6:

zypper in -t patch openSUSE-2025-120=1

Package List:

- openSUSE Backports SLE-15-SP6 (aarch64 x86_64):

chromedriver-135.0.7049.84-bp156.2.107.1
chromedriver-debuginfo-135.0.7049.84-bp156.2.107.1
chromium-135.0.7049.84-bp156.2.107.1
chromium-debuginfo-135.0.7049.84-bp156.2.107.1

References:

https://www.suse.com/security/cve/CVE-2025-3066.html
https://bugzilla.suse.com/1238826
https://bugzilla.suse.com/1239780
https://bugzilla.suse.com/1240968