-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: e824240ae69da6eb31b69db52361c7eb6a231fd1 5516364 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 3b17956f009a75904975dbe200a284ecf6b26b72 22644080 chromium-common_143.0.7499.109-1~deb13u1_armhf.deb 6a4f6e78821b6af0fdd198671f24ad58148ff31a 33904808 chromium-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 785a798006d38588432c38d2585477fccaa16771 6964956 chromium-driver_143.0.7499.109-1~deb13u1_armhf.deb 6a770d6c1fee90b7ea67f67a93aa5b0f443e5aec 26576964 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb e322a41a802ab8c951ecdec78ffa1e55625d6b7e 51644708 chromium-headless-shell_143.0.7499.109-1~deb13u1_armhf.deb 5bf600e7f4824e9725767a8bc9e18f5a14781b92 19256 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 7eb1f492c967d036fa51fe1d1e6445958bd1a0f8 106536 chromium-sandbox_143.0.7499.109-1~deb13u1_armhf.deb 73938e8ae3bb4914fda4fa553df4f3e443eefd35 28879124 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb cea9b012f1cdb124d98f16656603beeaddaf2303 56450884 chromium-shell_143.0.7499.109-1~deb13u1_armhf.deb 9f19092c604ae4cac41a9cf3a042c811ceabe634 30050 chromium_143.0.7499.109-1~deb13u1_armhf-buildd.buildinfo e19bb19b2caf9bce44e91e4b86e89c477cb03269 67515180 chromium_143.0.7499.109-1~deb13u1_armhf.deb Checksums-Sha256: 7efe417b0305339e02c1beb43131aab2c47ea9c89a5ee07ea64b3eac7af647ea 5516364 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb c1ec435b63d33865c005e8585f80aad8d514bae3eb64669796e743b1f3884537 22644080 chromium-common_143.0.7499.109-1~deb13u1_armhf.deb 77fcb8e60b3280015f4d31a732b7377ab225668721428ad945972dc98e683667 33904808 chromium-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 2056918e93b971787990114bf9f43089a56eaa5a672dceebc758b7045a1865de 6964956 chromium-driver_143.0.7499.109-1~deb13u1_armhf.deb 851c4012f19bcfec123c4b2a68d8acb78ef9b0814ed1c1f31826e04d72e43fd0 26576964 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 4d14a54ec4c3edf9238c66dbb5b99b20634a8e3eba0df6f2212627863140570b 51644708 chromium-headless-shell_143.0.7499.109-1~deb13u1_armhf.deb 41ed070d199d7af41e811b97663d0daae76f289fc693cc79e237098c70278fd8 19256 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb d9a9c8eafe0a0dba0d2635551276620400cd2491123e49f09a3acf46e3c2fb7c 106536 chromium-sandbox_143.0.7499.109-1~deb13u1_armhf.deb e2289b11d06db7046d580acaf187aa9cb2b78a9eb3471237a0fd9349bd37ddb2 28879124 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 8c1a0fb25bc9eb0bcfb73637c0b70f0b09d753c5b70487eae8614ed7338cd98d 56450884 chromium-shell_143.0.7499.109-1~deb13u1_armhf.deb 58f921435025fbd2337a7cac54e8757952e063a745d1fad51eaa1aa530148baf 30050 chromium_143.0.7499.109-1~deb13u1_armhf-buildd.buildinfo dccf8c7af77f20ec7574b43fff2265359a23fa9f2594a87aaffefcc89c046ddc 67515180 chromium_143.0.7499.109-1~deb13u1_armhf.deb Files: 00447891aa80fdf837f0097ada037c59 5516364 debug optional chromium-common-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 61ae2d13f883b01964ce77880bc29025 22644080 web optional chromium-common_143.0.7499.109-1~deb13u1_armhf.deb a8e06f1234f0e84bfd23d57b1f6459a8 33904808 debug optional chromium-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb cc059390ecb530ba3a775cff5faaf84c 6964956 web optional chromium-driver_143.0.7499.109-1~deb13u1_armhf.deb 1dd43c45d18568941198ed6fc131b2ca 26576964 debug optional chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb f506b8e10b5b04f4f8ba0d4e6c7883c7 51644708 web optional chromium-headless-shell_143.0.7499.109-1~deb13u1_armhf.deb ce5d4af53837a9a254d29aa46b813124 19256 debug optional chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 2bf755d5196fa122894e7a796ebb6f2d 106536 web optional chromium-sandbox_143.0.7499.109-1~deb13u1_armhf.deb f70fad77bd7013a05118b3a6547427a5 28879124 debug optional chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_armhf.deb 326c0a306055010018c5c41de1258cd8 56450884 web optional chromium-shell_143.0.7499.109-1~deb13u1_armhf.deb 6f2c8b50a6a89c15f974bf07461f88ac 30050 web optional chromium_143.0.7499.109-1~deb13u1_armhf-buildd.buildinfo c3aeeef3e4f74897f7ef2ff87a95890a 67515180 web optional chromium_143.0.7499.109-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmk7WjMACgkQJ7tNDw2W yRvDpBAA14+VzRiKOE/em60ZME8f0hdf8iHMqltM2LabUAHiKmyKlODuubOf59qw mmmehVXE1zFnZkLqUxiL19YyvalLuI9rb8GKivHsc/aEE6lfc388668EWGpp/Be3 ZClnpGjubNiH+suFH7XKCis251gqLurKzxl5oLvvnkx2qGYUvACCQZhCxuv4aV0x +hiXa4XJ5odvxSFll7OM2BOxlEV7U5NFKt7hnoLQLLsVDTpYn2uEgFGv1cZWvJUe fZ0sh+dmvnHTcdxqY7KpQurNIf6VrVr0yPaepkLZ9tUpv3YjB13qLCUUJIPdVeag xCqNMUtOhAGc76uuH9CPZX/yBAA3KN3Mb/NV9Jh8YFZXzAsCCS+ksjk0zt+LxWoB cMGwmhal36UldTZbpjP6UqbWUZ3x6lZVg43XC3l8LeDuWddNzmkqul/heoPynGIs NOsEpGFAa8VugA8I5HBZK1hUI1VNxsayH7LN1pEYa3JrCLRk+hFax8mQvJ1SJnLb uqVot6g8fFoxbETfUsGOJq758km89HcRI3RctbRPBLSnubEBXtJqaj5YBvq+9jf7 F5dPhC9K7MVvzmmNC6sJT75q8VYc6sItXMyXhx+sTvTNy+hyZaFq33tk8rj65fv6 Xkrm8NL3dqZhpqEE0dYAGNCv/pNRnYSbol9hlbMNIOnyo1pNDO4= =MU/s -----END PGP SIGNATURE-----