-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 12 Aug 2025 17:12:12 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 139.0.7258.127-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (139.0.7258.127-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2025-8879: Heap buffer overflow in libaom. Reported by Anonymous - CVE-2025-8880: Race in V8. Reported by Seunghyun Lee (@0x10n). - CVE-2025-8901: Out of bounds write in ANGLE. Reported by Google Big Sleep. - CVE-2025-8881: Inappropriate implementation in File Picker. Reported by Alesandro Ortiz. - CVE-2025-8882: Use after free in Aura. Reported by Umar Farooq. Checksums-Sha1: ce492474fa9da6b282afc1d96307f09b650b6ad3 5276228 chromium-common-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb db830515db088feb4b896bbbdfd7130cae0d8a61 22211504 chromium-common_139.0.7258.127-1~deb12u1_amd64.deb 996cf217fbf7d6ce8c0f03e016cdd26e0be2fcb6 33300684 chromium-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb fa0c42c015268d9b69cfd53b756a1b98432544f4 7970452 chromium-driver_139.0.7258.127-1~deb12u1_amd64.deb 4e8b0f18cf6147b9e4d8991cbddabd1b478cbbed 27845380 chromium-headless-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb fbc74dcdd0d11d71880fc7919d9b4c9255e8fef7 55412216 chromium-headless-shell_139.0.7258.127-1~deb12u1_amd64.deb 3cd55d165df65dbeabbbff23a5d55b44d91b03d7 19376 chromium-sandbox-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 3c0802e566be3b76dcb91ebc88a63a5f18ad0668 106172 chromium-sandbox_139.0.7258.127-1~deb12u1_amd64.deb 28f26aac19bf4faf4a0975b72b2e063e6c510056 29970260 chromium-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 49085e1c51999ce0f2df4071b51a9d2ab135f109 60078264 chromium-shell_139.0.7258.127-1~deb12u1_amd64.deb e42839e44b48c34f50fcce7fa656c613daf4007a 30321 chromium_139.0.7258.127-1~deb12u1_amd64-buildd.buildinfo cd384c6ecc7a935f5ee9993797c1f41807633dc5 70305276 chromium_139.0.7258.127-1~deb12u1_amd64.deb Checksums-Sha256: 008aae4c173b20c56995f54bcf3ce109cbecc78e66f5cdadcee7cc73faa7fb6a 5276228 chromium-common-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb da95e874444757b8b28ac473deed6bc8f8cfdad9cf1d635c7eaebf607aa21dcd 22211504 chromium-common_139.0.7258.127-1~deb12u1_amd64.deb f78663a9a195b88f7a500541f88ed195730f1b2a0787ee33e2c71b14fa93349b 33300684 chromium-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 7c55011343a5c1ef1242c9141a711456f2bde5f6e5f57cd7db375be5a0515730 7970452 chromium-driver_139.0.7258.127-1~deb12u1_amd64.deb 8ae370e47ecd563817b00888a544b86b6e8c44cbbb0dffb1e19d9ca34e070889 27845380 chromium-headless-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 8dcf66a981346f6a25d3348fa66d0b90b80c358ea3950c321b0c8059d0952333 55412216 chromium-headless-shell_139.0.7258.127-1~deb12u1_amd64.deb 5c884249efb94a1cfb5a0fcb143641113505ba5720b8c724a54839cf7de4f391 19376 chromium-sandbox-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 2b7e646c46021a65b833c884df683938e113cb749f1c46f87e66c9cd817658ed 106172 chromium-sandbox_139.0.7258.127-1~deb12u1_amd64.deb cab8c7e989cbe997eabf0d61ed0ca0f5281d841e6e3def08e1ca0d7cf718b4bf 29970260 chromium-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 10571ac99bb8a9989f64a66ebb52917a95864e6fcd839b2e091322d990b4de0e 60078264 chromium-shell_139.0.7258.127-1~deb12u1_amd64.deb 88754ad85da2663b3093624d0641e7c9857dee2f755bc019467ff07e4b42da9b 30321 chromium_139.0.7258.127-1~deb12u1_amd64-buildd.buildinfo c8c484d43fa92ce33ecd8f160ae0f65f7d18f711638483d8557326c840998ef8 70305276 chromium_139.0.7258.127-1~deb12u1_amd64.deb Files: c5e44c4f6353b0c3809299407ee7492b 5276228 debug optional chromium-common-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb ea4a6ecad45d06790539f3b11595db52 22211504 web optional chromium-common_139.0.7258.127-1~deb12u1_amd64.deb 83dea175e84d6604fb1e6fdc14a3a10d 33300684 debug optional chromium-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb cd8b17d31081dc438b4629ea1e09c656 7970452 web optional chromium-driver_139.0.7258.127-1~deb12u1_amd64.deb d8cf885c55694a5c848f7af89bb5c29c 27845380 debug optional chromium-headless-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb fe35f2d83151aa0888ab9024809e97d4 55412216 web optional chromium-headless-shell_139.0.7258.127-1~deb12u1_amd64.deb e6d1034e6dcbad4d4295216a55935403 19376 debug optional chromium-sandbox-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 314289eac3da1db586fc3a1ee1644e63 106172 web optional chromium-sandbox_139.0.7258.127-1~deb12u1_amd64.deb 95d7a3a430e7c9450e9861d98b7707bb 29970260 debug optional chromium-shell-dbgsym_139.0.7258.127-1~deb12u1_amd64.deb 5de720a1899872cd73aeed3a039f38cb 60078264 web optional chromium-shell_139.0.7258.127-1~deb12u1_amd64.deb 74867a0ae8ced1d5ca009b115e714dc2 30321 web optional chromium_139.0.7258.127-1~deb12u1_amd64-buildd.buildinfo 84e417d97c04f0d499600eb6ea1bf78d 70305276 web optional chromium_139.0.7258.127-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmic258ACgkQiZlfn74W V6m+Xg//QL/Hq1FKuWqRdJU4cdb1n26h/Kmj+d+EZycJ4hyFwmi1B8ZtrcD5ga96 ViZRpXu7mn+n2Xw7PoLH7T4gMEVSNZXlaw3ZwqyrjdqQbQl8jflonYJb3Jw8nl9R 9q+Ge1eJvq5trMr8XJ+/H1WhGPJVXQhtxA380ohBotREo5IzPBJY6OtBU2o2Kl0U 25tutBgk8chusyBJz1MKCn2AzQLyUjqpwV5u0iwI2iczQBub95ICONA1UMDJYWCq RcUyCPV4LdsTqSUU4TWGekJBzYMFp9SptlKFEC9qWYxI30D32ny+BxaBgDp2wDol uF6NeEzpiUkjfOafa7KW7Iy+SlzHEjl0U/zvyCSednz+T2yTTTcSuwENmTL9exH3 hpwmzUH6jDONp5Co9AC/QDeFkzYO763zbNz6JvgLaTLbYAz0hhJLr55lFKOhT+tO nqQztxKOkKwIP3YTvXsNEGmPUdNvYk1sWGKAbTAWlqM+F9dP0TShUY9Gu5X1TZ7x s+PzZxWy/5kplh+wqq9sd0akFEZkmajrQOcWLSNIxSAyAwOBGAlMthrZS0suxEVu PF6xjq0s2GPlUXJqA07RM0+gfw0TREL5TtCHd5x9MUGReqr+VWUQSlq2JA5LOqJ2 HTT7ZWgBpUNS0JFVLsWaq0Lay3rmcUkA5GfP/KLuXZKPKNKF8XU= =AneS -----END PGP SIGNATURE-----