-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Jul 2025 15:35:02 -0400 Source: chromium Binary: chromium-l10n Architecture: all Version: 138.0.7204.157-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (138.0.7204.157-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2025-7656: Integer overflow in V8. Reported by Shaheen Fazim. - CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU. Reported by Clément Lecigne and Vlad Stolyarov of Google's Threat Analysis Group. - CVE-2025-7657: Use after free in WebRTC. Reported by jakebiles. . [ Timothy Pearson ] * d/patches/ppc64le: - fixes/fix-page-allocator-overflow.patch: add to fix sporadic partition allocator failures on ppc64el systems. - third_party/use-sysconf-page-size-on-ppc64.patch: drop, no longer needed. Checksums-Sha1: d12bfbc1e73ac6bf0bd0dce5c6e6d738b644047b 8282124 chromium-l10n_138.0.7204.157-1~deb12u1_all.deb c7f0e1d367e332515e78703e5238e6d900d798c6 26822 chromium_138.0.7204.157-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 6a5c2c10cb5487734d4b8531fc8ffc829e554a28e24f21383b05f9db424274c0 8282124 chromium-l10n_138.0.7204.157-1~deb12u1_all.deb fd800d9340b02339821775e2d53ae8551412b85c1b173aae017100ce68b903f6 26822 chromium_138.0.7204.157-1~deb12u1_all-buildd.buildinfo Files: c0c0bb02b5a44ee7f62a16b87d9f1189 8282124 localization optional chromium-l10n_138.0.7204.157-1~deb12u1_all.deb f84569ae176be2feb80c3b61d2eea777 26822 web optional chromium_138.0.7204.157-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmh4OycACgkQJm69HxMT N+pdVhAAkYpOEDaF/ZM8B0wQ251qIhxKEnOcqYgiy3NHgjdl3s6/ZqzyuLgYvvYs N75/N8LBkAGiq52ULj5EJ5tYp1JnoL5YNGnTXohuDF2RMGWOVPZyvMnMHwIJqOrA c3mSO9YHPzd0H19JReBBu8Gg7lUF0N4Tr5WMKTunFrVrH+yLbh3T8EC3TI7syH8I 8nig+jGKjtWqHD7R8+BLXcDE0JVoD/XUjJZOl42yXVVXsu/M6B/zD1vbFUO8JVQC 2SaJBEKZifly2PEzPY/vaTIQB0nXlQIxTYqQkTCAeN/rjGbC7UHLu+2tGk9f1neq YIYLz9vvz+oI5Ua9Mt3ofSCWE61WaHrlSObe2Ef4/DWAQr0PbIcrGlGYIbC7E5GX If/2yeKHTdxxidZtdfOb6/kk7r8SpNfT5NUhsE+kmMgtju2S0N6WUwJDQ+zQekDd DpWFc8yEYQNji3Kk1puM61bTqjiK05DBT1u57fnFJZ7pVG4O5Xknje7PamTfOaoG yVD2Ot5zsjxWJyCk/0gUer8vnRyAT6OXxxZwFRHE1cSPb4mAfS2sUwSdPjJU/yVh 2UAR9fElX4KtePAeF2OgCZ/+ij69irUggQmyYD2ZPF2qdJ7W5RpxnqdyP+OXNvZ/ z/cZKtNL6jz4bBvsgLaYi8TswyKyTOWxHdQFAeuDUfKUzSIt818= =pLeB -----END PGP SIGNATURE-----