public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: - Updated to 139.0.7258.127
@ 2026-08-07 16:08 Than Ngo
  0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
  To: git-commits

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : bdab54f04795416cd86010411bcc88b695141962
          Author : Than Ngo <than@redhat.com>
          Date   : 2025-08-13T12:07:03+02:00
          Stats  : +10/-2 in 2 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/bdab54f04795416cd86010411bcc88b695141962?branch=epel9-next

          Log:
          - Updated to 139.0.7258.127
* CVE-2025-8879: Heap buffer overflow in libaom
* CVE-2025-8880: Race in V8
* CVE-2025-8901: Out of bounds write in ANGLE
* CVE-2025-8881: Inappropriate implementation in File Picker
* CVE-2025-8882: Use after free in Aura

---
diff --git a/chromium.spec b/chromium.spec
index e1fabb9..e7c8a42 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -244,7 +244,7 @@
 %endif
 
 Name:	chromium
-Version: 139.0.7258.66
+Version: 139.0.7258.127
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1743,6 +1743,14 @@ fi
 %endif
 
 %changelog
+* Wed Aug 13 2025 Than Ngo <than@redhat.com> - 139.0.7258.127-1
+- Updated to 139.0.7258.127
+  * CVE-2025-8879: Heap buffer overflow in libaom
+  * CVE-2025-8880: Race in V8
+  * CVE-2025-8901: Out of bounds write in ANGLE
+  * CVE-2025-8881: Inappropriate implementation in File Picker
+  * CVE-2025-8882: Use after free in Aura
+
 * Tue Aug 05 2025 Than Ngo <than@redhat.com> - 139.0.7258.66-1
 - Updated to 139.0.7258.66
   * CVE-2025-8576: Use after free in Extensions

diff --git a/sources b/sources
index c44c6ca..3e72dca 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-139.0.7258.66-clean.tar.xz) = 24b908c74694011bd968abc7da0e4d2048dfe8b252ed38beda7b56eafea3b23f7b568dd3035ae9ccaee1d0733b265588a6c5ac41b3707c43539dfa9118218f2d
+SHA512 (chromium-139.0.7258.127-clean.tar.xz) = 2b990abb4e1ab05bc187511552261bdf225191934e4a5d19224f7e4f1178148bd3e758cfe11c74c324bd8f51cac25925ade29b3da39e7c92e87eceb06aa6879e

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-07 16:08 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:08 [rpms/chromium] epel9-next: - Updated to 139.0.7258.127 Than Ngo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox