-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 23 Sep 2025 16:50:58 -0400
Source: chromium
Architecture: source
Version: 140.0.7339.207-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (140.0.7339.207-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2025-10890: Side-channel information leakage in V8.
Reported by Mate Marjanović (SharpEdged).
- CVE-2025-10891: Integer overflow in V8. Reported by Google Big Sleep.
- CVE-2025-10892: Integer overflow in V8. Reported by Google Big Sleep.
Checksums-Sha1:
b1ca47edb17a9ec1e054589241ad8553b98b75ce 3995 chromium_140.0.7339.207-1.dsc
86bd2445b36de5d1d6e5b3cc47e471d248d832a8 993803584 chromium_140.0.7339.207.orig.tar.xz
ec5bdc1f8fd18bf81bf77c9f9e6f52eaa00d4976 414060 chromium_140.0.7339.207-1.debian.tar.xz
3e85ec7f767f3b9468f2838870e43f7219f1c3a1 26457 chromium_140.0.7339.207-1_source.buildinfo
Checksums-Sha256:
fcce8afe6129d5fa809ba0844d1d3deaa0b3200ed50b27db34296d0ec2e73b4b 3995 chromium_140.0.7339.207-1.dsc
38b0d4dfb3a839f0cf6d7e05ddc55f3d73bcdf519e2211fa0d3d797824b548d0 993803584 chromium_140.0.7339.207.orig.tar.xz
61e4f435b3e3f621b12229a81f371a917d8e0fe84c6f184044345e4a086765e5 414060 chromium_140.0.7339.207-1.debian.tar.xz
f68f1b7a86dede0a4dd6437473d098e82d44dcb8e7d760ba7925c8817eb7a394 26457 chromium_140.0.7339.207-1_source.buildinfo
Files:
8d8151f4f78def85e7305e6d3c0dd7df 3995 web optional chromium_140.0.7339.207-1.dsc
2d18b4e91e7ad24cc5b42f7cc42a87f8 993803584 web optional chromium_140.0.7339.207.orig.tar.xz
128f4bc93ab92c889fdf7f524317cc3c 414060 web optional chromium_140.0.7339.207-1.debian.tar.xz
e55343513d6971f926b2a71bd5acd5c6 26457 web optional chromium_140.0.7339.207-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=OFWJ
-----END PGP SIGNATURE-----
Attachment:
pgpV0u4Amtapf.pgp
Description: PGP signature