-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Sep 2025 23:24:57 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 140.0.7339.80-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (140.0.7339.80-1~deb13u1) trixie-security; urgency=medium . * New upstream stable release. - CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team. - CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. - CVE-2025-9866: Inappropriate implementation in Extensions. Reported by NDevTK. - CVE-2025-9867: Inappropriate implementation in Downloads. Reported by Farras Givari. * d/patches: - fixes/armhf-icf.patch: refresh. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - disable/widevine-cdm-cu.patch: refresh (and make it shorter). - bookworm/clang19.patch: refresh. - disable/android.patch: delete a new reference to chrome/android/. - disable/buildtools-libc.patch: drop due to upstream cleanups. - trixie/rust-no-alloc-shim.patch: add a build fix for older rustc. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0002-regenerate-xnn-buildgn.patch: Refresh for upstream changes - fixes/fix-study-crash.patch: Refresh for upstream changes - core/add-ppc64-architecture-to-extensions.diff: Refresh for upstream changes - fixes/fix-unknown-warning-option-messages.diff: Refresh for upstream changes - libaom/0001-Add-pregenerated-config-for-libaom-on-ppc64.patch: Regenerate from new upstream version - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Regenerate from new upstream version Checksums-Sha1: 72064a6c92c1f031a4022e62cbde965792ecd744 5037608 chromium-common-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 8924a7db92d682369ef6ee13aa407ce9c4f48fc5 22296852 chromium-common_140.0.7339.80-1~deb13u1_amd64.deb 8f9fa307732732ddc3c196db760fd1af3d99bf93 31097768 chromium-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 1d79868b9ea30af5b2b1029bc068501aae6fd7a8 7575756 chromium-driver_140.0.7339.80-1~deb13u1_amd64.deb 8841c4c0b834e15f8244cfb0195c187ae872d6cf 26488840 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 34a6e950282d7ad37ee6fc3d5232c99872fb1cda 59584812 chromium-headless-shell_140.0.7339.80-1~deb13u1_amd64.deb 9bd0259aa0d02a26fbf06aa2e250552ebc1f76bb 20172 chromium-sandbox-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 9065b46bc14727ff36ecaf95d21d25ae465ed190 104416 chromium-sandbox_140.0.7339.80-1~deb13u1_amd64.deb 8de1db0bd703f01b74aee1772318de2e4505b4b9 27428388 chromium-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 8d87a0c5c719dff6db00810ea3bf4b7b9e1fc433 58147320 chromium-shell_140.0.7339.80-1~deb13u1_amd64.deb 699bb65b4c991b21b049455922a6651dfe4d9984 29736 chromium_140.0.7339.80-1~deb13u1_amd64-buildd.buildinfo 54bf07f898f9bbb34af2aefff2bd52d41f1045e9 79694028 chromium_140.0.7339.80-1~deb13u1_amd64.deb Checksums-Sha256: bc1bf16b4e45632f6c9547b5861da4ea0ee03227bca54c232b9ffd58bd20b5e2 5037608 chromium-common-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb d5c6301d4f647c240333e7c66c5207af1553e258cb8c956498bb60950bc54611 22296852 chromium-common_140.0.7339.80-1~deb13u1_amd64.deb 6be745a3a9b494f0987104cb84af52e80618da99cb196416f959c2f71a0ea163 31097768 chromium-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb c37ac7b6a7e7dbd02763f102f193b8796453b235ad2a46c42a9a49b1c321ac7f 7575756 chromium-driver_140.0.7339.80-1~deb13u1_amd64.deb 128229b8055c706b24d21e5eba798494e4ae368d4d3743516d17eaac88ab35ce 26488840 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb e388c821f494b9ba669fa653bca1283a223ecb2f3a94cba5eaaf2360abf12dc0 59584812 chromium-headless-shell_140.0.7339.80-1~deb13u1_amd64.deb 4cd03d288750405b65fb834f16724f46fc285f71b93e605832433570ee8d096d 20172 chromium-sandbox-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 7e797624506d8ab48ad13d6e7ef13a4212585483b62d1d388fada417b1cb9ec4 104416 chromium-sandbox_140.0.7339.80-1~deb13u1_amd64.deb 641ddcf15a15b889db3670e15a70440e5335c9b596eeb1e6b90328d6a5e7361f 27428388 chromium-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 5f524ed58433b86149d4eacdda7177418007c9b3a9a665ff3e361c248fe0dffa 58147320 chromium-shell_140.0.7339.80-1~deb13u1_amd64.deb ee4ba0fcecf58ed2021ea7d15239d2cb45c222bac77e07f380b2ae1c84b81978 29736 chromium_140.0.7339.80-1~deb13u1_amd64-buildd.buildinfo 5b1fa819f8d5f1af001111cfb7eaeaf32aa6900ae3354df7c8a47cb186853832 79694028 chromium_140.0.7339.80-1~deb13u1_amd64.deb Files: 4fc5e5cbb1670e0f7b0b3e633cfe054f 5037608 debug optional chromium-common-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 8ec161dcaa768a071a377407d5fd4ee2 22296852 web optional chromium-common_140.0.7339.80-1~deb13u1_amd64.deb 6839e384194662d8f27f30f1bc34cdbd 31097768 debug optional chromium-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 1970c1ecbe2b3095f997e005f2432951 7575756 web optional chromium-driver_140.0.7339.80-1~deb13u1_amd64.deb 405bda27fef51d4e60b9f98ecd318d60 26488840 debug optional chromium-headless-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb a92e163d71b4821e25d2ed7e6bb07091 59584812 web optional chromium-headless-shell_140.0.7339.80-1~deb13u1_amd64.deb 3b6adebc75681a3d28745571cbec57fd 20172 debug optional chromium-sandbox-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 5867d74506409e9df198ee4a6ba7b5fb 104416 web optional chromium-sandbox_140.0.7339.80-1~deb13u1_amd64.deb 177dbcfd49fb1898d8de059cf1c5b510 27428388 debug optional chromium-shell-dbgsym_140.0.7339.80-1~deb13u1_amd64.deb 5ae1ac022646477412554c0506d768e0 58147320 web optional chromium-shell_140.0.7339.80-1~deb13u1_amd64.deb 303f20c93addfdc8562629d36f09c5fb 29736 web optional chromium_140.0.7339.80-1~deb13u1_amd64-buildd.buildinfo 652e8971b3672fd48083450e6d0bab30 79694028 web optional chromium_140.0.7339.80-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmi68+kACgkQEbCLukZn 24pyuw/9Fyl3GNEkycBUiibm3+ykMVnltDEH6nuBLo1dSBlzFPmH4yensIUwYKBm yqiY1TGcFqM9UQ0mC8HxJg4L+YslgOhN3f1ix4Fj+QuGDmYsTb7eJvEL3Igv7M3S 6GKKMhB/VjgVBn91PhyBzOygPIZOr3l5V/7ylbzqeaQ8ZgrchlRIorkRqQ0NuJym CR8c/dZ+/KEADK2h45PyAPtTuSzCrV0aoxYqncbHAcQsLoSy08DTFfbEp6Zu+jmg a4VlG0ptOov0s8gwR+2tWpeSgD9OcC39TO+J0c2LDwip73sEkaGfPaRnZlsU0VbT YpI6RMgYimlnElC+dkv+fFS2ZpvzSzFF7ihY6hOJp230fLCaxYHsoi2euDm9IMsz eIzyjLxkXJdQt6vVLL/n1WDvCsD/xILCbblaekrwmj99MaeYUIG4XHA3pUN6sMru WEPfY+rP2avGdgIHyb58Lj9VzqD7lhsRE524lXHWbXE02chSXA7VCbSg4e6Jxyhz 2E6pdM9bIblT26xaxWfqA9jekJN0CzRyCG7I8QdivmYRavqr7EXUEtDIFvNMr4tb kRQ9axcw49mnkqAOeGuImNoD0/xWhhvjoqz2oBQVyc/6AP7Jx9FFTB+gtF3fsWNj 8/s4Sg0yVmX+t4NPIjPEES/mU99dt3YbhPABB6wT0SWJxxmrpHE= =0i0o -----END PGP SIGNATURE-----