From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA256   
      
   Format: 1.8   
   Date: Thu, 04 Sep 2025 23:24:57 -0400   
   Source: chromium   
   Architecture: source   
   Version: 140.0.7339.80-1~deb13u1   
   Distribution: trixie-security   
   Urgency: medium   
   Maintainer: Debian Chromium Team    
   Changed-By: Andres Salomon    
   Changes:   
    chromium (140.0.7339.80-1~deb13u1) trixie-security; urgency=medium   
    .   
      * New upstream stable release.   
        - CVE-2025-9864: Use after free in V8.   
          Reported by Pavel Kuzmin of Yandex Security Team.   
        - CVE-2025-9865: Inappropriate implementation in Toolbar.   
          Reported by Khalil Zhani.   
        - CVE-2025-9866: Inappropriate implementation in Extensions.   
          Reported by NDevTK.   
        - CVE-2025-9867: Inappropriate implementation in Downloads.   
          Reported by Farras Givari.   
      * d/patches:   
        - fixes/armhf-icf.patch: refresh.   
        - disable/tests.patch: refresh.   
        - disable/catapult.patch: refresh.   
        - disable/widevine-cdm-cu.patch: refresh (and make it shorter).   
        - bookworm/clang19.patch: refresh.   
        - disable/android.patch: delete a new reference to chrome/android/.   
        - disable/buildtools-libc.patch: drop due to upstream cleanups.   
        - trixie/rust-no-alloc-shim.patch: add a build fix for older rustc.   
    .   
      [ Timothy Pearson ]   
      * d/patches/ppc64le:   
        - third_party/0002-regenerate-xnn-buildgn.patch: Refresh for upstream   
          changes   
        - fixes/fix-study-crash.patch: Refresh for upstream changes   
        - core/add-ppc64-architecture-to-extensions.diff: Refresh for upstream   
          changes   
        - fixes/fix-unknown-warning-option-messages.diff: Refresh for upstream   
          changes   
        - libaom/0001-Add-pregenerated-config-for-libaom-on-ppc64.patch:   
          Regenerate from new upstream version   
        - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch:   
          Regenerate from new upstream version   
   Checksums-Sha1:   
    23a45517e7ef4bdcf54c47887bf3cbf10323ea9f 4020 chromium_140.0.73   
   9.80-1~deb13u1.dsc   
    0b2b5eb6733d9b9e8af2a6ab9ea538b4f2f94887 994293180 chromium_140   
   0.7339.80.orig.tar.xz   
    6ccbef9486477cba837785cbe91c68db3952bec4 413968 chromium_140.0.   
   339.80-1~deb13u1.debian.tar.xz   
    713c384d2ba9dd82bde6daec61acfdd169fc4fa2 26321 chromium_140.0.7   
   39.80-1~deb13u1_source.buildinfo   
   Checksums-Sha256:   
    518666a754f1e4af610fb0811964557dd1e5c8ed6c5d38f183f0d34f56b2014f 4020   
   chromium_140.0.7339.80-1~deb13u1.dsc   
    7b215870adc944b4e099c0b0328b2d39c00b41d0d7612c24d51cb8b5af7f50cb 994293180   
   chromium_140.0.7339.80.orig.tar.xz   
    b9bc1312bb67e6514a0a620badd6ac2e8291f86c2f05677706e30b01370ac6bb 413968   
   chromium_140.0.7339.80-1~deb13u1.debian.tar.xz   
    a0c4a7d00cfdfed1a951928cbb7dec2a517b169956a25c338c5c5be9e89eba28 26321   
   chromium_140.0.7339.80-1~deb13u1_source.buildinfo   
   Files:   
    1dbe4fc900b694ffe384b53feeb71a4f 4020 web optional chromium_140   
   0.7339.80-1~deb13u1.dsc   
    80b09e639ca8a500be1c7f03a47b3e55 994293180 web optional chromiu   
   _140.0.7339.80.orig.tar.xz   
    ef6243c0f9289fac9a105e872eaff62b 413968 web optional chromium_1   
   0.0.7339.80-1~deb13u1.debian.tar.xz   
    12e0cf611851ba5bda59618f962dc384 26321 web optional chromium_14   
   .0.7339.80-1~deb13u1_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmi6gAkUHGRpbGluZ2Vy   
   QGRlYmlhbi5vcmcACgkQZF0CR8NudjdiMQ/7BL9jzPTSUyQNvX3rUfJhSUzS2P6Q   
   FCf3qW2bpiVrWs+OYsc+Q8knikwa/QavdVathnwwmJ5BxC7ebIZNAWhgHWfD9fRO   
   HC8kWuKkdPdzWf3QlKJYa85E3grSIaspT7aQCo6QlritFXjY1FaDqEB3wYLT73X2   
   ZgrGIVBNiFuhxn6UhYkgdcAH0Y5dtZgEPKGFHxns+858iX/ujNHpFbst6E7PhKtJ   
   5VFyrgO1Fp8LVMZq4LKytLuzQcYbx05/rk9ttb5thO5QgQxaAmBgMmWJJjH6+7Nu   
   GYkybYhPoQPcZpNJT8Dcjq4qObkEJoyO+Dq50zVvw5yOmmtLZyEs03i5rgPVHd7+   
   gthfRRiGGB0EfGrrHJ158Y4JYiPSQlSxYU9u+x9tV1ikKYQhlGXVVLynkz/pgytJ   
   gLRswOteBxvx7pk1d4UxoBY32xJnOyP9OI5Z7HtlPWg2txqH5cQHfsXrtIFpn5Co   
   oLa2HFglPmToPgBfFY0ztmDvIRMo0kY1SVXqIsuhJLAKnZnYa8CVF97l76X6ap23   
   KFcPli3YinGEElrKqPCvAoY+6dznRwXVyfizFSdc+mqeDlpm88l3g1SR3m/UFDAZ   
   T8hrkQRz1+AuKDnBgBonPgqlTloD+MlSfATPw4KcEJS3PVwbsWbWoTuUpAuWnDfW   
   Ytx+bvVDHtGCjt4=   
   =mGhM   
   -----END PGP SIGNATURE-----   
      
      
   --==============69317352949470655=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaLyoWQAKCRCb9qggYcy5   
   Ic3bAP0d028wuJu8ft164391IuUp6D+BQVjmanIrgzMxeF29VwD/XiwcW2Aa3+JH   
   NVPLtP92ZZ1YHmbfFZk8tr34Tfo4Igk=jtTh   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)