Critical Security Update for Chromium: DSA-5877-1
Summary
DSA-5877-1: chromium - security update. Affects chromium versions < 134.0.6998.88-1~deb12u1. Fixed in 134.0.6998.88-1~deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser project that aims to build a safer, faster, and more stable way for all users to experience the web. It serves as the foundation for many browsers, including Google Chrome. The package is widely used in various operating systems, including Debian. However, it has recently been identified to have multiple security vulnerabilities that could potentially compromise user data and system integrity.
Vulnerability Detail
The vulnerabilities identified in Chromium, including CVE-2025-1920, CVE-2025-2135, CVE-2025-2136, CVE-2025-2137, and CVE-2025-24201, stem from flaws in the browser's handling of web content. These vulnerabilities could allow attackers to execute arbitrary code, leading to unauthorized access to sensitive information or system resources. The vulnerabilities were introduced in earlier versions of Chromium and have been addressed in the latest security update.
How To Fix
Minimum fixed version
134.0.6998.88-1~deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromiumTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable JavaScript in their browser settings to mitigate the risk of exploitation until the update is applied. However, this may affect the functionality of many websites.
Conclusion
The identified vulnerabilities in Chromium pose significant risks to users, making it essential to apply the latest security updates promptly. By following the recommended steps to update the package and considering temporary workarounds, users can protect their systems from potential exploitation.
See every vulnerability recorded for chromium →
FAQ
The update addresses multiple vulnerabilities that could allow attackers to execute arbitrary code and gain unauthorized access to user data.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update immediately, consider disabling JavaScript as a temporary workaround to reduce the risk of exploitation.
While this report focuses on the Debian package of Chromium, similar vulnerabilities may exist in other distributions. It's important to check for updates in your specific environment.
It's recommended to regularly check for updates to all software packages, especially those that handle web content, to ensure you are protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
