-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 09 Sep 2025 17:50:07 -0400
Source: chromium
Architecture: source
Version: 140.0.7339.127-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (140.0.7339.127-1~deb13u1) trixie-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2025-10200: Use after free in Serviceworker.
Reported by Looben Yang.
- CVE-2025-10201: Inappropriate implementation in Mojo.
Reported by Sahan Fernando & Anon.
.
[ Jianfeng Liu ]
* drop not working fixes/libsync-rk3588-panthor.patch.
* drop fixes/strlcpy.patch, which isn't needed w/ clang-19.
Checksums-Sha1:
b30f41f8fa5a5428e1c09438c7f181e244410b93 4027 chromium_140.0.7339.127-1~deb13u1.dsc
88c3f5e4cd9a91f4932b22d72d5306d97413a3b0 993548320 chromium_140.0.7339.127.orig.tar.xz
b23ff551253cf382027f7d3b2044027620404630 413764 chromium_140.0.7339.127-1~deb13u1.debian.tar.xz
1fdb3d0cdffb11046aec54c460dabad52128b6ff 26325 chromium_140.0.7339.127-1~deb13u1_source.buildinfo
Checksums-Sha256:
42b3f702fa70e0cd0f7957c97be8b7908e2a6c5f80097690abe04ea27ecd971c 4027 chromium_140.0.7339.127-1~deb13u1.dsc
3fd2dd7a985db58c1dff2f99932f9bca30943b7ee686aa10c4009d9b153daa24 993548320 chromium_140.0.7339.127.orig.tar.xz
741dfc844590582271c3712c095e0ab22c2c42d7f31f53e30fdeb8c5cb1b2afa 413764 chromium_140.0.7339.127-1~deb13u1.debian.tar.xz
71669a4c68fb1be8ea2baef97524b5ded75501027b9dcf5c9cbf2f49eae01af9 26325 chromium_140.0.7339.127-1~deb13u1_source.buildinfo
Files:
369b7ab3046d0d9044d2f41e4a070945 4027 web optional chromium_140.0.7339.127-1~deb13u1.dsc
7bf46ebed3da2c6d0f1569f4d3017afe 993548320 web optional chromium_140.0.7339.127.orig.tar.xz
784a007468308a22f460028a7e69d6bc 413764 web optional chromium_140.0.7339.127-1~deb13u1.debian.tar.xz
22188e6dc85bfc055f25e2cb966e6956 26325 web optional chromium_140.0.7339.127-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmjBEL0UHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8NudjeFDQ/+MZPsZV+KpumUx5GDd85a6V4iJGY6
n0ZAgfQy2UW3phb5hPRXnOVpXz8g+XBxhL58pZXlLNp7nJUtcqRBsatDObgM9y1w
eK205lgFNwPqYIPgMJ6Skm22gvMmBXrLigZ+paS9EAChZSAEGRwPLWj2rDhqOVot
4hsipyvwLZsCOik+CgEcjTX8CohyKlQQAMHf15b7mE4+b+AZH/9yO6KI8hZGQbTz
QryvPbNe1kKKcxsAbL636dK4EkjBIwy0+IYZVhUqo9R4NwSmJKedicChqu4TgCAB
ha1+adZREK/YRgvQIxy0uqIL6RK2rrUwcMhMHgoy2Iz3egrVT+ijlHMqG2OsZ4O4
cHxQKgtZWIncEGnEzhfxbpN621UIKPNgTJ4z39FtCtrhXJCy+BPv+bUyg3dqmKBf
/MWr9lBhECcA/QJJ+Sa+kkmpaGp+DOnOt75xlnEZjbIYb9Z8qWjTl+MIsyDaVB9m
dwPWQowG0fkOVXTzk7FCTwKlnNZU+F2asKcBGUMjbSYDwPty+FvNBa98gKRCar7J
Gao4u5Bl6roT6l7D+SkSGPr2VWS114QzBnjRV9aKizvAr/JG3pAI7OK96kvZKpVx
dJKP2jozHT3uRPd6HKNvjWZmNxMoERvdCy74whTZ1dqmlNc9tafJMz3DDFMAtJvR
M1OXerkLPm5gbsM=
=2K90
-----END PGP SIGNATURE-----
Attachment:
pgpW9Fvs78Oqh.pgp
Description: PGP signature