From 7b2538b003a1cb27b423e0376fffdfb08226171a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@riseup.net>
Date: Tue, 30 Sep 2025 16:40:30 -0300
Subject: [PATCH] gnu: ungoogled-chromium: Update to 140.0.7339.207.

Fixes CVEs 2025-10585, 2025-10500, 2025-10501, 2025-10502, 2025-10890,
2025-10891 and 2025-10892.  See:
<https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html>
and
<https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html>

* gnu/packages/chromium.scm (%chromium-version): Update to 140.0.7339.207.
(%ungoogled-origin, %debian-origin): Update hashes.

Change-Id: I1dd6c0a0b318eba6840c6d9bee41df3ac39a31e2
Signed-off-by: Danny Milosavljevic <dannym@friendly-machines.com>
---
 gnu/packages/chromium.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/chromium.scm b/gnu/packages/chromium.scm
index 0ae196fc34271f71c18ef9d367b6de7e1e597619..5d1b9efaf6625e144ae473c4e2a78852cb36ee6f 100644
--- a/gnu/packages/chromium.scm
+++ b/gnu/packages/chromium.scm
@@ -366,7 +366,7 @@
   ;; run the Blink performance tests, just remove everything to save ~70MiB.
   '("third_party/blink/perf_tests"))
 
-(define %chromium-version "140.0.7339.127")
+(define %chromium-version "140.0.7339.207")
 (define %ungoogled-revision (string-append %chromium-version "-1"))
 (define %debian-revision (string-append "debian/" %ungoogled-revision))
 
@@ -378,7 +378,7 @@
     (file-name (git-file-name "ungoogled-chromium" %ungoogled-revision))
     (sha256
      (base32
-      "1dvwa4gln3yg35bawapjmkmmgvwxnzgln0k1fb6amnal29vjw4ws"))))
+      "1kmfsb57cqks84i523ryw2l089gl0iq9hgv3sy8r8441b5nv3yn0"))))
 
 (define %debian-origin
   (origin
@@ -391,7 +391,7 @@
                                 ((_ version) version))))
     (sha256
      (base32
-      "0nb844l24a9mpjzb2x6hna09yi0fhyzn3m8khj94fv6jv9js796a"))))
+      "1hwzxlxs3c0x87rbq3b8p1m2pcjy3b10vyhbia5p3aiqdqgbm97j"))))
 
 (define (origin-file origin file)
   (computed-file
@@ -525,7 +525,7 @@
                                   %chromium-version "-lite.tar.xz"))
               (sha256
                (base32
-                "0z6siz1k0z1ns0iy1rwclx4mmjgi1ch5gd0vp3jq1dqvh5zx3802"))
+                "0cbfvdlz8wkzyljf9ri9viivf02dikhd286ahzrcv9752y9hj563"))
               (modules '((guix build utils)))
               (snippet (force ungoogled-chromium-snippet))))
     (build-system gnu-build-system)