-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: 5396ab9de9543b9c8c733d4e0ea2ad5cc4ec6e7c 5131500 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_i386.deb c47e85a8f33ee957782b36bc2f32ba12a2093100 22855796 chromium-common_143.0.7499.109-1~deb13u1_i386.deb 0451d40cf21a7a88f137de3b8f20283005a60c9a 34415292 chromium-dbgsym_143.0.7499.109-1~deb13u1_i386.deb ce298d264980544b39df22f430f043477ea597b2 7599260 chromium-driver_143.0.7499.109-1~deb13u1_i386.deb 9c8a87011ae1194e3bf4129f69871e7081e81913 28524060 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb c3b83d7af2c300d69c50996b3c55276a8916024b 55936636 chromium-headless-shell_143.0.7499.109-1~deb13u1_i386.deb 9320302254397ab702adb4b173c806da527352ab 18984 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_i386.deb df1406f6e3b1b3fa0774af4c925d4d6a3b53bdb0 106740 chromium-sandbox_143.0.7499.109-1~deb13u1_i386.deb 7ef3b32de40e329e7117dcb486fa05ccb744deea 31286464 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 2ad68c4dba886070357eb6dadb1178afed0b9878 61118320 chromium-shell_143.0.7499.109-1~deb13u1_i386.deb 34fe465f16b7cc426c5257fb71f1e90793c08743 30089 chromium_143.0.7499.109-1~deb13u1_i386-buildd.buildinfo 5d4d964a06dd4aba2deaf5d549927f25c4795f91 72823828 chromium_143.0.7499.109-1~deb13u1_i386.deb Checksums-Sha256: e290e30a23b948acdd3efe98241f45292f571a47e880678b47a8f56a69bb97ed 5131500 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 833e24b7b68883fcc8279acce2e5ec106e86649980ede735c073238f8681931e 22855796 chromium-common_143.0.7499.109-1~deb13u1_i386.deb 596c48b01d08387cf476b1921b0f631e3d8eb03a44b3318d989d6b4326ffb060 34415292 chromium-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 8d338afaac1091647a32cde3fc7f61511e6c62593b272ef2f256e621d460f61c 7599260 chromium-driver_143.0.7499.109-1~deb13u1_i386.deb 63e2b043c88deffe44d23ee1e4aa7c195c0def80d014ab4a28afe695be899aff 28524060 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb b5fb64c7749bd7e3f55015d3c8bad872cabbd3bc377f68ffeff2f6fc442f90c9 55936636 chromium-headless-shell_143.0.7499.109-1~deb13u1_i386.deb 03e94fac4cd45f2c5fc97b8e73d4fbcccc49b7ff49f51ab641ffcda0c440202c 18984 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 785589bc32b45f89030c0574b5285bf1b63aa9524ce14d3d84dbfdb1dad4a7cf 106740 chromium-sandbox_143.0.7499.109-1~deb13u1_i386.deb b57a4e2260125e64f0f3146afbff3a2199a80f487610f3bcf2fc3ffec6067f9f 31286464 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb e968ce4e662979f6f2d781464f4a2ed3350ed221135894ef7b0d5ea4d003c153 61118320 chromium-shell_143.0.7499.109-1~deb13u1_i386.deb f4a90bb3cde2b15db84686d79b3b8825d3f0d172529b8fd1d2f94d16dbc37b96 30089 chromium_143.0.7499.109-1~deb13u1_i386-buildd.buildinfo 46b403689e4897a863bfa8fad7c756e1e761b375da3d9d248d1aae204368c382 72823828 chromium_143.0.7499.109-1~deb13u1_i386.deb Files: a448da67a9edf51dfbf7088e8d62be47 5131500 debug optional chromium-common-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 96e614f89c56bfe6f90905dbe32f3a69 22855796 web optional chromium-common_143.0.7499.109-1~deb13u1_i386.deb 75b5408656abb83f204605f4e767893e 34415292 debug optional chromium-dbgsym_143.0.7499.109-1~deb13u1_i386.deb a79e926bfc176c1b2ad4fda93dff4280 7599260 web optional chromium-driver_143.0.7499.109-1~deb13u1_i386.deb 2da34060325ae0e7636c4f9a8f1b6888 28524060 debug optional chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 9a8c82c03004e38db0b075cf60f435ec 55936636 web optional chromium-headless-shell_143.0.7499.109-1~deb13u1_i386.deb 92b7edfc21cef3c0df1f3622b98d5167 18984 debug optional chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_i386.deb a3193a2dffa20bb683ead43660b2a5ca 106740 web optional chromium-sandbox_143.0.7499.109-1~deb13u1_i386.deb 39a1c8c6ea9ee1b0dc2563362fb60905 31286464 debug optional chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_i386.deb 8dcb4009586c45ce7a1c87ccb8183efb 61118320 web optional chromium-shell_143.0.7499.109-1~deb13u1_i386.deb c63fcbd0c05a49c83f0b71f7e8fd72b1 30089 web optional chromium_143.0.7499.109-1~deb13u1_i386-buildd.buildinfo b3b179a6ba62f9df734acb0bf79c6a44 72823828 web optional chromium_143.0.7499.109-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmk7VxIACgkQJuP6X4A0 XeKI8Q//cuoATRE6tXy9ZxBQhP7+LvUV0wJufJg0LacA9wL2OIWtXj2cJ2i/FjHx FG+JBGuWuIoXDmQ4fx9vOxBEDDai0zdMtpRLFRasCALpsGF3D9XxGIyTOH3zL9Jx 8bMjur930DtqtIDe+gkYWk19a41CU2od57atwnwL3z08Zatkmeh0+GfmA3y0b80A fy4uL/oeSNfDLgxCEHs1uzUo0iXgTZV/EI2426zlFgqdGYduxSNioZnkR6BjrJhm ME8jc2RQpzLFR1s7D8jF423Mh8Mloz05OfVCMC8XvZhzeguWH2RsflAiWJB5BoF+ Bm+v7YvWckCjSPtObxq8TGaPKBfOK9j1NgGFEa4dLe65YPY74CPRG+B3PsNlQAjT ha4Y2Dee9f21HGnIqYqigy8xLfz8y3rhpRVpyCrEnGSuJFuW/Ea5YNQiQryqKApJ lURJPJ4t0SpqxhEhwOmqUHjjTTG7+2Mw3NSiCn4hJBI04Zrj0FbHI8fzw/Ws2u+p EqFWWBAw8+BNG1Ji+J5sJnaxVxcDpuDUlT4YbnPw5AhDSypLmvKwDN+27ZmV8qe2 MbQ7o5X8HL3WHrSJQHVrykC2V+tLjEsELtnc59YsEKXum23Ie7oCuCe0BFCqtDHC 8eJHb1Cb2+QT25MupjqoBP6mAgudTuRNg7IJZdTUKZ0H0wwZASM= =ZkjJ -----END PGP SIGNATURE-----