-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 12 Aug 2025 17:12:12 -0400
Source: chromium
Architecture: source
Version: 139.0.7258.127-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (139.0.7258.127-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2025-8879: Heap buffer overflow in libaom. Reported by Anonymous
- CVE-2025-8880: Race in V8. Reported by Seunghyun Lee (@0x10n).
- CVE-2025-8901: Out of bounds write in ANGLE.
Reported by Google Big Sleep.
- CVE-2025-8881: Inappropriate implementation in File Picker.
Reported by Alesandro Ortiz.
- CVE-2025-8882: Use after free in Aura. Reported by Umar Farooq.
Checksums-Sha1:
0d5173d7787e9e3e444de84dd83a2166a3cb2e68 3995 chromium_139.0.7258.127-1.dsc
5a6bb7d858ff749f78b292c601e54dd6a924a5a4 970152272 chromium_139.0.7258.127.orig.tar.xz
a338abb535161e5e09683eaf2594dfe30e372fc0 396648 chromium_139.0.7258.127-1.debian.tar.xz
ecec1d0c51715ee2cb3a00234e051c472deb5979 26199 chromium_139.0.7258.127-1_source.buildinfo
Checksums-Sha256:
4e418b577ac4684daf6f183a5c67f68fcf903443565423a9f9beb099a440215d 3995 chromium_139.0.7258.127-1.dsc
950be055598444f29aa5c4fd2210a1751d001259a068edf972d823eb0bfad5a5 970152272 chromium_139.0.7258.127.orig.tar.xz
aee1da6fa39d6f90898d3270ff87029dac55d9bd0def934ca2de1ca8193bedcf 396648 chromium_139.0.7258.127-1.debian.tar.xz
26088ba8782a9c7c2812c090ba36bc64a9dde5ebdb406bb006d7f5fb8915fdb6 26199 chromium_139.0.7258.127-1_source.buildinfo
Files:
d19d7cc6114bd38db9e1975c2674191d 3995 web optional chromium_139.0.7258.127-1.dsc
df4389306d542832f758b402f153ccee 970152272 web optional chromium_139.0.7258.127.orig.tar.xz
e4730314e1f5a02b1d6f7a6277110d74 396648 web optional chromium_139.0.7258.127-1.debian.tar.xz
1aad31d6bd1b27277c553eac55597cec 26199 web optional chromium_139.0.7258.127-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=36zL
-----END PGP SIGNATURE-----
Attachment:
pgpXJ5KlxUEcU.pgp
Description: PGP signature