Pull request for maintenance update #152

Closed
dancermak wants to merge 1 commits from dancermak/PackageHub:maintenance-update-1759247148 into leap-16.0
2 changed files with 26 additions and 1 deletions

View File

@@ -0,0 +1,25 @@
<patchinfo>
<issue tracker="cve" id="2025-10890">*** SECURITY TEAM ONLY ***</issue>
<issue tracker="cve" id="2025-10892">*** SECURITY TEAM ONLY ***</issue>
<issue tracker="bnc" id="1250472">VUL-0: chromium: release 140.0.7339.207</issue>
<issue tracker="cve" id="2025-10891">*** SECURITY TEAM ONLY ***</issue>
<packager>AndreasStieger</packager>
<rating>critical</rating>
<category>security</category>
<summary>Update of chromium</summary>
<description>This update for chromium fixes the following issues:
- Chromium 140.0.7339.207 (boo#1250472)
* CVE-2025-10890: Side-channel information leakage in V8
* CVE-2025-10891: Integer overflow in V8
* CVE-2025-10892: Integer overflow in V8
This update for chromium fixes the following issues:
- use the same llvm version on recent distros,
build currently fails with lvm21
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>