-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: 8f12534a6d1bbff9f13e6bccdc2c12f16ed1aafd 5096852 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 7dc2d027a8bd7738e08a92d5b0b01a1a128fd861 22692312 chromium-common_143.0.7499.109-1~deb13u1_amd64.deb 56b33724657ab5367217b0d28331004e4472a903 31750848 chromium-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb e9b74f1974aa85689175fc48eb57c9d2a300df80 7178236 chromium-driver_143.0.7499.109-1~deb13u1_amd64.deb 4983afd113d48e4407a2ddc1c97959f2f5c83e76 26973356 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 130d7b30a09b8c07c92efe0d9a9d1bea0130c77e 59643872 chromium-headless-shell_143.0.7499.109-1~deb13u1_amd64.deb b4d45ee71f43db4c18be484d0369df7242a6a198 20212 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 55644989816002a3574b0b580d8ec5632a9dc005 106892 chromium-sandbox_143.0.7499.109-1~deb13u1_amd64.deb 3a806cc892bbba5045d394eeda66596a5c99c390 28564208 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 8cd646cc01b91236c40393da32c55c3c4f356b63 58695652 chromium-shell_143.0.7499.109-1~deb13u1_amd64.deb c0f373e9d997edd207f8a891be4410cc397a1902 30167 chromium_143.0.7499.109-1~deb13u1_amd64-buildd.buildinfo c25ad15f9e6eff1137e6d9c181c0c8ae47c80df9 80228808 chromium_143.0.7499.109-1~deb13u1_amd64.deb Checksums-Sha256: 6b7ee8fbcbe9cb50429477b5ff9288bdfe5160fceae5b59806e23a744e24a55a 5096852 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 380036b57871c224f23bdfe3dc2fce075ae447998f1ce5e8a657b18fb1e16e35 22692312 chromium-common_143.0.7499.109-1~deb13u1_amd64.deb f13dd6061580f0a09c6011f1d5187a2de07c0d2082ef5ca5e5fd807b9af6fd82 31750848 chromium-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb a0422f971ac39702e1aa1d57176a502f85636478a9a7d847455334a528560cf0 7178236 chromium-driver_143.0.7499.109-1~deb13u1_amd64.deb 038974457aae6dbec0370f976c54632dfa3a92650d8d36d0eda3922a351aa397 26973356 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 9b2266ab8b4b141dfa337977baf08d0101b260d68a921336b181371dd7fe1228 59643872 chromium-headless-shell_143.0.7499.109-1~deb13u1_amd64.deb 06356ee0908a1ec68165b4cfbbafc6b99b9f9ddd984ec5688ab2e38b5ed727c6 20212 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 03aeae54103b6543f1fd14fee5735f2b1ff202cd83ffff92e578eb848e03e84b 106892 chromium-sandbox_143.0.7499.109-1~deb13u1_amd64.deb 5b5296f13dc4ece45724abd2ef1a880f20edaaae3f6e0ee034fb182fee87dd80 28564208 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 058d96452e24ea938bbe88eefb2a1dbb9c8c2bcc4842df3200916a390f4d4103 58695652 chromium-shell_143.0.7499.109-1~deb13u1_amd64.deb 69ee79056c5ff58027444d5c5efb2854b0dce0d5b01b55115e4aaeb44468139c 30167 chromium_143.0.7499.109-1~deb13u1_amd64-buildd.buildinfo c6a4900426ab22bd19d504cc08806fc93eea3b283eddacb3be4f0b9934681138 80228808 chromium_143.0.7499.109-1~deb13u1_amd64.deb Files: 4bdfa4f3a19555542975946da11f54e3 5096852 debug optional chromium-common-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb c11d7e6eb05d5f3373f698eddb90a372 22692312 web optional chromium-common_143.0.7499.109-1~deb13u1_amd64.deb 72915ae4e7433e4e5c1ccc02e71d1f12 31750848 debug optional chromium-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 07636dcc8a0509cf647a0ac94122003b 7178236 web optional chromium-driver_143.0.7499.109-1~deb13u1_amd64.deb 1d2c4f5dec29cd95f3c4cd610acd08ae 26973356 debug optional chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb e2b2a1af8759598257df7b63b7802798 59643872 web optional chromium-headless-shell_143.0.7499.109-1~deb13u1_amd64.deb 51c17ccd54856061dccfb364b1f2fa9b 20212 debug optional chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb b1c5f3af40bf9ec2ada819126ec0e494 106892 web optional chromium-sandbox_143.0.7499.109-1~deb13u1_amd64.deb 4c0caa55a8a2207407dd7846ecae7a1a 28564208 debug optional chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_amd64.deb 617f0e62d30767f5efc6de321823aa11 58695652 web optional chromium-shell_143.0.7499.109-1~deb13u1_amd64.deb 0535d0b16b31494da91949a5a53ddd00 30167 web optional chromium_143.0.7499.109-1~deb13u1_amd64-buildd.buildinfo a61edc7c13f625454e5b30b12901be05 80228808 web optional chromium_143.0.7499.109-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmk7SmQACgkQfUw6/tXb AmPyuQ/9G2F9VtHapx7fr+Z+bWmyyyoHi0ZQnmm3ae/ktMo8It4Yqu8zCcyOhmzp KKFEfj9QI8z3kRsA6yNaMRrgiy9FNRmCdHNlMY+CwN5FGzh0RHNlQpoJ2+QJqxxT UwZPzsx5D8+P5DzrddYWIQ9mPt9SUUWhpgBWU62fkkyIcayqdBIm1VKI7insdNQf M6o31dhE3ktROBSCM2oq/hDPsXKYRaC82qBGHNPybwz3/oqlO2Obg/M0lSkO6OhV sP5zVGDF2f4QiT+eWvbSfPGWTlpmNxur5Po9WrAHYHrj/OctwQt9UD8aokZmRU9S ubSY6LUeKhE2cG88gX4Xt5JHor6J+3WKHcioYTdAOf7yktCazgw26PYCZx04QDat 8d936dHGaRaooL7To89oyonc+55JHsb6f7w/zvs3dEAac8f3PUf4SkUVRCEdQa6Y D4NhGUKVO+5VSzG0yayAckWlu6Mv8KsbdfJ6imyg2yyA4y6mWcglUhWdRHFR14pU 0w68mSCo7YiEyVIuKWWkVyLBnYA2zXxemIq8WDkLbLA8xjy9e2UQG0Po6jFclvZJ ki7qtx1RK2qZhYw8OJ1VUtX3fShJ/zYjzBLapwZ1sAsOSxGUY6EetY0GZEu497UW xXW8grC+Lm8cufT7BdS6oEGbuP6qZVazIb7JC6x/GWMt85NGQ3Q= =lJOS -----END PGP SIGNATURE-----