-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 09 Sep 2025 17:50:07 -0400
Source: chromium
Architecture: source
Version: 140.0.7339.127-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (140.0.7339.127-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2025-10200: Use after free in Serviceworker.
Reported by Looben Yang.
- CVE-2025-10201: Inappropriate implementation in Mojo.
Reported by Sahan Fernando & Anon.
.
[ Jianfeng Liu ]
* drop not working fixes/libsync-rk3588-panthor.patch.
* drop fixes/strlcpy.patch, which isn't needed w/ clang-19.
Checksums-Sha1:
a8308dc8dfc213660aa31424c650ef4cc06e4a04 3995 chromium_140.0.7339.127-1.dsc
88c3f5e4cd9a91f4932b22d72d5306d97413a3b0 993548320 chromium_140.0.7339.127.orig.tar.xz
b891e0bf3037d34680fac0173039ce51f782cd3c 413884 chromium_140.0.7339.127-1.debian.tar.xz
1e0e91ddf195a19391eb5a6e2acc4a686b22bcc8 26457 chromium_140.0.7339.127-1_source.buildinfo
Checksums-Sha256:
eb0d5fe8f4120a139872b3843c526d8ce037418d83455ad5a3c7d20f1b6ea7a8 3995 chromium_140.0.7339.127-1.dsc
3fd2dd7a985db58c1dff2f99932f9bca30943b7ee686aa10c4009d9b153daa24 993548320 chromium_140.0.7339.127.orig.tar.xz
67ea5b8da69c0f0f6533a319150ea938b87605d2345f20071a5bd487bc862623 413884 chromium_140.0.7339.127-1.debian.tar.xz
482133fcca8557d9833d3534d85c23852e8d3a3e21129ff494a31b06fd393f38 26457 chromium_140.0.7339.127-1_source.buildinfo
Files:
7b7fffc7b7c474626529abf786468775 3995 web optional chromium_140.0.7339.127-1.dsc
7bf46ebed3da2c6d0f1569f4d3017afe 993548320 web optional chromium_140.0.7339.127.orig.tar.xz
616e3d491f2547dc20f21b4c348c7788 413884 web optional chromium_140.0.7339.127-1.debian.tar.xz
8f6307466f22c0440f5016a76181efaa 26457 web optional chromium_140.0.7339.127-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=8sqo
-----END PGP SIGNATURE-----
Attachment:
pgpf9qzImguCq.pgp
Description: PGP signature