– Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buffer overflow in ANGLE
Comment
The update for libxslt announced in DSA 5979-1 introduced a regression while back porting the upstream deterministic generate-id implementation, which makes the generated IDs may remain in a non-deterministic order.
dpkg could be made to consume disk space if it opened a specially crafted file.
Rebase to 2.7.2
New upstream release fixing the following security weaknesses (CVE-2025-8114, CVE-2025-8277)