-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 Aug 2025 17:12:12 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 139.0.7258.127-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (139.0.7258.127-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream security release.
     - CVE-2025-8879: Heap buffer overflow in libaom. Reported by Anonymous
     - CVE-2025-8880: Race in V8. Reported by Seunghyun Lee (@0x10n).
     - CVE-2025-8901: Out of bounds write in ANGLE.
       Reported by Google Big Sleep.
     - CVE-2025-8881: Inappropriate implementation in File Picker.
       Reported by Alesandro Ortiz.
     - CVE-2025-8882: Use after free in Aura. Reported by Umar Farooq.
Checksums-Sha1:
 cddc0bdf654533a67190bedd626db02410b52192 8335168 chromium-l10n_139.0.7258.127-1~deb13u1_all.deb
 8cdf16292823a4beb274c21a7c77ced6902ebe0b 26213 chromium_139.0.7258.127-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 af60dc4aed61adb989ddbf8ecc13d84e4b917df8fe9aa613542e4bb0cac514dc 8335168 chromium-l10n_139.0.7258.127-1~deb13u1_all.deb
 0071e47580c581f49de52baf3bb27df22f204c76ef7fdae7a72627188eebc16c 26213 chromium_139.0.7258.127-1~deb13u1_all-buildd.buildinfo
Files:
 cac6204b8967ddbb409205b4405fdf51 8335168 localization optional chromium-l10n_139.0.7258.127-1~deb13u1_all.deb
 99ebbe7de69743de771fd3b916c97d11 26213 web optional chromium_139.0.7258.127-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=XObL
-----END PGP SIGNATURE-----