-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 03 Dec 2025 01:54:50 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 143.0.7499.40-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (143.0.7499.40-1~deb13u1) trixie-security; urgency=high . * New upstream stable release. - CVE-2025-13630: Type Confusion in V8. Reported by Shreyas Penkar (@streypaws). - CVE-2025-13631: Inappropriate implementation in Google Updater. Reported by Jota Domingos. - CVE-2025-13632: Inappropriate implementation in DevTools. Reported by Leandro Teles. - CVE-2025-13633: Use after free in Digital Credentials. Reported by Chrome. - CVE-2025-13634: Inappropriate implementation in Downloads. Reported by Eric Lawrence of Microsoft. - CVE-2025-13720: Bad cast in Loader. Reported by Chrome. - CVE-2025-13721: Race in v8. Reported by Chrome. - CVE-2025-13635: Inappropriate implementation in Downloads. Reported by Hafiizh. - CVE-2025-13636: Inappropriate implementation in Split View. Reported by Khalil Zhani. - CVE-2025-13637: Inappropriate implementation in Downloads. Reported by Hafiizh. - CVE-2025-13638: Use after free in Media Stream. Reported by sherkito. - CVE-2025-13639: Inappropriate implementation in WebRTC. Reported by Philipp Hancke. - CVE-2025-13640: Inappropriate implementation in Passwords. Reported by Anonymous. * d/patches: - fixes/headless-gn.patch: refresh. - fixes/chromium-142-iwyu-field-form-data.patch: drop, merged upstream. - disable/tests.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: sync from upstream. - fixes/libpng-testonly.patch: add a workaround for a missing build target that upstream forgot to include. - trixie/rust-no-alloc-shim.patch: mark nightly feature 'no_mangle' as unsafe to make rustc happy. - trixie/cookie-string-view.patch: add a workaround for missing clang-19 feature. . [ Daniel Richard G. ] * d/patches: - debianization/cross-build.patch: Avoid "Assignment had no effect" error from GN when running outside of d/rules. - debianization/rustc-bootstrap.patch: Move RUSTC_BOOTSTRAP=1 here. - disable/license-headless-shell.patch: Don't generate the (unused) LICENSE.headless_shell file, as the rule tends to break easily. - fixes/headless-gn.patch: No longer needed, thanks to previous patch. - trixie/rust-is-multiple-of.patch: add more workarounds for missing rustc features. * d/rules: Move RUSTC_BOOTSTRAP=1 environment setting into patch. . [ Timothy Pearson ] * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - ppc64le/fixes/fix-clang-selection.patch: Refresh for upstream changes . [ Jianfeng Liu ] * Add loong64 support, with patches in d/patches/loongarch64/. Checksums-Sha1: 5cc122a5503cf1538229f945f51a54145f6f6d38 5987664 chromium-common-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb bba512e1b3a76f1c17e22b3b97277565c285fd91 27513568 chromium-common_143.0.7499.40-1~deb13u1_arm64.deb 336065b83d24832af4dceab47776bafcbfe7bc0e 32209376 chromium-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb b32235a6ac276855c713611d3b77e397ba0b5a91 6423036 chromium-driver_143.0.7499.40-1~deb13u1_arm64.deb 1b59616844a8e070bbb89abe4960d3c59c437584 26862736 chromium-headless-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb ba42e94585ad957fec31d651cf741ff649263ebf 51877236 chromium-headless-shell_143.0.7499.40-1~deb13u1_arm64.deb 5b63df2a5d82933bc66365ebe9c310a1cf8e14f6 21088 chromium-sandbox-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 6a46371f48c62eef2d0125b6b4dd39a20ccd7442 107268 chromium-sandbox_143.0.7499.40-1~deb13u1_arm64.deb 7ed993210876b1e6ff44b88a1c99da0f6c48daf1 28288996 chromium-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 14e1ca29c6c077ef52e525965c1783c49b9b423c 51544188 chromium-shell_143.0.7499.40-1~deb13u1_arm64.deb bf8abe23a6ec97ddea2aa47276c77069579f18a8 30109 chromium_143.0.7499.40-1~deb13u1_arm64-buildd.buildinfo c1dfc6fa3b6fc836606fe021546f4d84faab56e2 69243528 chromium_143.0.7499.40-1~deb13u1_arm64.deb Checksums-Sha256: 9d1e418d5674dc72bef56d380a1b89d0d07647a1850438e390d4b3010c3a53b8 5987664 chromium-common-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 87f9fc7a59644b72a60c2364a2ee3d491722b4c205f1ff138c8553c4e21045c0 27513568 chromium-common_143.0.7499.40-1~deb13u1_arm64.deb daced18aaa52747470ec7f0d02acc0374641d979125d3ff1bdedcda2a25dc1b1 32209376 chromium-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb e574d94a68c739e8e7f672482c70d761f8d496dbc7dc8d8e343ce89617ff87b3 6423036 chromium-driver_143.0.7499.40-1~deb13u1_arm64.deb a448a91ba1a2a9dbcbfe5e45fdbb163a90962c581178d0ba197547a4be74c97b 26862736 chromium-headless-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 1145644f740b136ac47ba8f3b939fa6213ef5e3f236b0acb16377bf9faa504ea 51877236 chromium-headless-shell_143.0.7499.40-1~deb13u1_arm64.deb e681000546fa710e2202c43d7daffc3181fa8bddb5fffb9805eec8fe9b344aae 21088 chromium-sandbox-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb a08eefa59cc118d92ce1cba3479d5b4bfd6e6bdbe889e66ef814395977622e37 107268 chromium-sandbox_143.0.7499.40-1~deb13u1_arm64.deb af17e31a6febf1a5ae0ef546383d0d2c09a8a5abfa0b54fb1886bc2a76a618eb 28288996 chromium-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 98ab8aba5c637a885877d983d9717318c0a9f32b0afcdaccfa08dd61981ced46 51544188 chromium-shell_143.0.7499.40-1~deb13u1_arm64.deb f3d02e129ed43aecb1104711d7d29708e190934442971b70653594596eb2dd06 30109 chromium_143.0.7499.40-1~deb13u1_arm64-buildd.buildinfo 3e7a4437bf8d952a21c45f5717425bebb70b2aa93506517e6660651b79ff6280 69243528 chromium_143.0.7499.40-1~deb13u1_arm64.deb Files: 909102dac44ba148adc1985be439f366 5987664 debug optional chromium-common-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb ffa718c3a44a78348c5a65c5ec5964db 27513568 web optional chromium-common_143.0.7499.40-1~deb13u1_arm64.deb 0dc51d6d3c461d16e30507dc919210ea 32209376 debug optional chromium-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 3f7fe1eabc0c0d925d29fc85aa6779ee 6423036 web optional chromium-driver_143.0.7499.40-1~deb13u1_arm64.deb 0f6527505e8a5ee88baf41544264aff4 26862736 debug optional chromium-headless-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 3401aa176e3d191fd277fd587893a767 51877236 web optional chromium-headless-shell_143.0.7499.40-1~deb13u1_arm64.deb a98461457143822f54eda88aca5dac25 21088 debug optional chromium-sandbox-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb 38a9ccb5500d0543d2306e46100f366b 107268 web optional chromium-sandbox_143.0.7499.40-1~deb13u1_arm64.deb 5b6da26cd670117edc30d4ca243f8774 28288996 debug optional chromium-shell-dbgsym_143.0.7499.40-1~deb13u1_arm64.deb e871a5192d2a4d54af337717942eb7a2 51544188 web optional chromium-shell_143.0.7499.40-1~deb13u1_arm64.deb 64e77085ea403ae0b4decb82d518acf5 30109 web optional chromium_143.0.7499.40-1~deb13u1_arm64-buildd.buildinfo 603166b98367b058335e5f932906de8c 69243528 web optional chromium_143.0.7499.40-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmkw4bAACgkQOQKMdMnE H5PAFRAA3kyHVeK0z8MIgHHNCkcu9lsVuq22fc18TkwR+em1xGRkpeXG4JqmRamF ErQaE5Hg5wQCD0hGTex1zZNTZ3S1ymXlaDLc+RBugAVwdnpqCX/NCATFftE6kUzA AKWDYJq98+7e/MD3KZEnnSIScVu1f4r5qNxjlv/fc4BBkZqEckC0NiEn3vqZpiIL TlXuVHySPTDzTr6ZMtiXRtFpvtE+0xV4qlm1D5on9mGuQCeR+o4+OzY0lQcKGDPx gQ2a6yyAXLGLmJLuut+qFOUp1UQm/BzJgq/s5j1iZcwVnoqdBcGYx97taE1IIcUS htjLsWVGjtcdEDeyAjoNr7q1xqkNYdgJsWNwNiR8TJhcwPhfmzPd0TMc5VV+S9wK ve6Mo8UhLVXPt9+/VwQ6xVJfroEMGZgQU19AfwhZtzkyjoyO+R+EvZuBtCPSR9xB l4B5GuOD8lNCXdguTJf4CeGEV6q5WFE6UeRUD6czUF8ntnu4n6Hq734ixtVy1gpE T+hC/Oi2NDDOj1ZIgK5dHvZwrclw6zAkxdXax62AH5esIf32yUHDSNHgXCK2k56c s85jrBnQlnTkLr3KMPTL7et8/fWCDCgVeg6rXYxuOn8/6KbBjS0c8FybvhTzP/O7 DcDKksSJxBHqYEJIe6TTXYjzH9LBdMVX4RIxbkaQC0KaPm1wy1w= =fPkI -----END PGP SIGNATURE-----