-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 03 Jun 2025 12:23:46 -0400 Source: chromium Architecture: source Version: 137.0.7151.68-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (137.0.7151.68-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon] * New upstream security release. - CVE-2025-5419: Out of bounds read and write in V8. Reported by Clement Lecigne and BenoƮt Sevens of Google Threat Analysis Group. - CVE-2025-5068: Use after free in Blink. Reported by Walkman. . [ Jianfeng Liu ] * d/patches/ppc64le: merge ppc64le sandbox syscall patches Checksums-Sha1: cea37995164da5aa325a1585d4f52e86929e821c 3997 chromium_137.0.7151.68-1~deb12u1.dsc f6db7b19b3e7a10554273f862241bca782ca9806 943835720 chromium_137.0.7151.68.orig.tar.xz f72893921e7ae2ab7ece1249eed9f3507ad73e3b 8488508 chromium_137.0.7151.68-1~deb12u1.debian.tar.xz c2d50bcbfad98ed29cd36b6175e97cd22642ab54 26603 chromium_137.0.7151.68-1~deb12u1_source.buildinfo Checksums-Sha256: f2d3d1bbff2a6e210630a7fe4ab300cdd0a84bdc41820cc45ee53a0c0c199afb 3997 chromium_137.0.7151.68-1~deb12u1.dsc dfe5d5f7e1bb1bc230629be360cdc4392ef88377d6b7cc9aa2270e9f7334e6ed 943835720 chromium_137.0.7151.68.orig.tar.xz 108acdf9f232a6bff6ac1a0c13b7cad34e6492abcfbee6fed5fa5d4ac52f8535 8488508 chromium_137.0.7151.68-1~deb12u1.debian.tar.xz 5f1078f0c8c084459c0caa3fc287109627d4b176f3a1287d12c367d49cb0cf8a 26603 chromium_137.0.7151.68-1~deb12u1_source.buildinfo Files: c94d67b3cfe40c47610dac4d06450b2a 3997 web optional chromium_137.0.7151.68-1~deb12u1.dsc 68029d433f5180ce97a99f64911c4843 943835720 web optional chromium_137.0.7151.68.orig.tar.xz 72b971b93bb1354d6e11f2dcc6e88a92 8488508 web optional chromium_137.0.7151.68-1~deb12u1.debian.tar.xz 1522078162448ea7da5020d01e062d12 26603 web optional chromium_137.0.7151.68-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmg/kwsUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudje5Tg/9H3YNTz5o0MTOr6d92EhqCFC7b+5d fd4yDyd0q5G0MZCvtq3OF3yT2OYAhSjsvvkgjgI0/E78/jf/yN2qpAS8PpawBYAA nFoUPOQll5QPSqupKH4moHNUCkw78KodoUlp0UDSlMYI+s6pGnhQ9oslpql+JLPv gxvm+i5kALB02V8g3s+Sr9HBk102PMF9f4PSb+HrgOmH//LMCCUq6FpCsrHr/MVf cg9hc098/TIwVKBtHKMFY523evduTHxtPvuZoHGicfsIPIhPFsGX2cjrlIPyje8f k84jmZfpXUrv96SUaTqSkbKTqCZyz/YeORkgx7PTH/QXsbFIJrQhnVgtvYauikUo EG20adYhsCpH3qNq4Dp8vOR4Gyqtq5BUTvzMbJaDAGMDD16ttZAHpfDgQqgI0Ot8 rimoblzfFM3xSb9VDXdlMJVsTpo8QaBcljdERlV4Ar8KWNO5pBIV6PQ3IYRGIiVS jQa6IKlw8PDuAc3TG4MPqP3bt+m8q15QJ3AUX8slS3yVgEhq7oeDeolSox8HVDq4 vGazOMuu7Toelf4YnLrYZUn1QfsteZHcCWHwx322d3AvMm5OPeMVdPp2+678tIAB dvjuvwQss6+9OayYD+tqgTRfXPvfHZMGuw0FW5Hqu5OR8Y1lJjhuZsyMi2jrlG0p 4K9PEOuhf2DdFgM= =nAwW -----END PGP SIGNATURE-----