chromium (135.0.7049.95-1) unstable; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2025-3619: Heap buffer overflow in Codecs. Reported by Elias Hohl. - CVE-2025-3620: Use after free in USB. Reported by @retsew0x01. . [ Daniel Richard G. ] * d/copyright, d/patches/system/rapidjson.patch: Slightly narrow the scope of the bundled RapidJSON deletion, and rework this patch so that it does not require the deletion in order to apply. This allows applying the debianization directly to the unrepackaged upstream tarball source. * d/patches/system/gperf.patch: Import (self-authored) upstream patch to prevent build breakage due to changes in gperf 3.2 generated code (closes: #1103226). * d/rules: Add new check-version rule to validate the package version. Also squelch error messages due to absent clang and rustc executables. * d/rules: Download Gentoo's upstream source tarball straight from GitHub. chromium (135.0.7049.84-1) unstable; urgency=high . * New upstream security release (closes: #1101978). - CVE-2025-3066: Use after free in Site Isolation. Reported by Sven Dysthe (@svn-dys). * d/patches/fixes/rust-clanglib.patch: refresh.