-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 17 Sep 2025 22:25:31 -0400 Source: chromium Architecture: source Version: 140.0.7339.185-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (140.0.7339.185-1~deb13u1) trixie-security; urgency=high . * New upstream security release. - CVE-2025-10585: Type Confusion in V8. Reported by Google Threat Analysis Group. - CVE-2025-10500: Use after free in Dawn. Reported by Giunash (Gyujeong Jin). - CVE-2025-10501: Use after free in WebRTC. Reported by sherkito. - CVE-2025-10502: Heap buffer overflow in ANGLE. Reported by Google Big Sleep. Checksums-Sha1: 4ee38f18fb4014e6dd7ff1da7f1a14cee7f765f6 4027 chromium_140.0.7339.185-1~deb13u1.dsc 9965e95aba521ca0a6bcb1861106ad33f1f2ee50 993761236 chromium_140.0.7339.185.orig.tar.xz f535faa89466fa5baff46d050a57b5dafce58e46 413828 chromium_140.0.7339.185-1~deb13u1.debian.tar.xz e2eada0918946d738b9616ef5c4354ab110d3f17 26325 chromium_140.0.7339.185-1~deb13u1_source.buildinfo Checksums-Sha256: bb1477fa3bdd049bc89840aa0c1ab9d5cfb87c4f711580276c716b7678c03626 4027 chromium_140.0.7339.185-1~deb13u1.dsc f81f22c5d544c2a62df83bf2608e98d8ef822ed8cdc359ae805a8ed9e7549873 993761236 chromium_140.0.7339.185.orig.tar.xz 275a5c8af1849c06241233d3afc73b347235e4645f3be2753d29eb29ad8c2251 413828 chromium_140.0.7339.185-1~deb13u1.debian.tar.xz d748ae0473d842a6da4d7fdd6f47c8b6f80ebf77db0f9692308eacefc32520c1 26325 chromium_140.0.7339.185-1~deb13u1_source.buildinfo Files: fea6f8c16db07c7ae62177b5b0ea58ae 4027 web optional chromium_140.0.7339.185-1~deb13u1.dsc 2e4618786d6a135df98a5106b59fba32 993761236 web optional chromium_140.0.7339.185.orig.tar.xz 200b8a8576fc5a497645fd04b122fc98 413828 web optional chromium_140.0.7339.185-1~deb13u1.debian.tar.xz e094764dc59f74d3a17e9e780ee9da0c 26325 web optional chromium_140.0.7339.185-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmjMPwMUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeXWA/9HSDGhZnXBARRx7B5M9BuxSXnSZm6 JZMQw0sW4AftyGO8lIzGY3tmbUH7snf1Lh4+dAXngM9nuOZknB3KqwMr7RBIZrVg AthFwu5IxjsqPpsmVjpxjRiK6E1Qbs7ltx6MBAeyWcRBg2eU8IUypfplZNWG+/ZU mi9AIcgvbxXPeYlaXYbgeBMj8x5oBNI0edybdkHRnNdbESNQeNXbbDtT9qIhOy0Y nQYwAtJS6FUMRD1DJH26SRSTkbaiHHrLP4CoPyic2C4GewotIcXoyXK1F/duiQx9 vyerS78o3Xi+YJ3CMYVJm0C1RxBktR1KIinHTIcmvpaay+52JswaJ6PMHGTPeyCN 3UkiH6X/ZVtcNCVSn/cEcyHpjy0efcGFVF1ZFVLQgt8MTn2pVwSHetZPhr+tt2oU SNLkXIQ+j2AIbX6znpNwpNYRTFr6+BP46buZV7qCkfGxh25QiZnoUiJDTTIQMlMF hOQJPg7dizeu+kQ1oPryWu6CCE3z5qv24GUF+qfYLTqtB3gobr5buyChhPBk9SBI 5EZqRfS3HBYArpP9Vi3O66+JPmz5irNpnBe+6SETAi8ux0q0P/aw0xo3i2nIW8kR x6GzYa8eHHF9iqY8cjMsDgnwOCpUuPPwP1zFdKfdwc8+bSMW9Nb5FAPpZ+0TRQu8 31qJzOQf6aZtJrc= =77+5 -----END PGP SIGNATURE-----