-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: 43ceafeb9c4446ae774a0a1c8981a84392262e2f 6016632 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 87179d4206b5c75eb456218ea22822bd40c06365 27516336 chromium-common_143.0.7499.109-1~deb13u1_arm64.deb 19fe6528d1919955005fe8f3e52463f6657c35f5 32201184 chromium-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb d6122c6966fb9e4147df10e1ecdf383d5d39e735 6422632 chromium-driver_143.0.7499.109-1~deb13u1_arm64.deb 89e8a6fa0a0f02aefc1afe2286dbd37449e9cde9 26856664 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb e1843f5bfcdc90b4286c395a3dc693163423fc97 51880520 chromium-headless-shell_143.0.7499.109-1~deb13u1_arm64.deb 4df26068e6eb25582c75970879293f24c4a299f4 21092 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 7361e574adea899897d4f677d185dd2a45b7bd5e 107676 chromium-sandbox_143.0.7499.109-1~deb13u1_arm64.deb eda460721c10f70a7984cb84bb0f779fe5e83c0a 28286992 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb b490263893bef8e50e72c7b592b5b9365afa2d86 51546772 chromium-shell_143.0.7499.109-1~deb13u1_arm64.deb 90409f26987b23615c2826c6295d707aff0fe1e1 30144 chromium_143.0.7499.109-1~deb13u1_arm64-buildd.buildinfo 0bed7c8b1510c1fd3a9a04a8189e42e82fe72a3b 69256604 chromium_143.0.7499.109-1~deb13u1_arm64.deb Checksums-Sha256: 25c2f2bfa00b5ae79c67220e48aa45a755d1bd6279dd8da4971f78e30789847e 6016632 chromium-common-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb c4be6a4e77a9527113c0108ea66b9a7f2c63d2e2040a6dc64b154807f5906beb 27516336 chromium-common_143.0.7499.109-1~deb13u1_arm64.deb 40130c3470d93e0fae500a905cf8231dc497f5bb74ab26714e2b08a6fa43c4ba 32201184 chromium-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 3e23efa0647e0add21387e118b14f2c4a436d39afe5c16cc35ab24b74dced5ae 6422632 chromium-driver_143.0.7499.109-1~deb13u1_arm64.deb 8586966849b330527031b018c6de8e4d5a2097b3f651636b553e74872ca2c044 26856664 chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 1be5c4c601fd28ad9bdc5e3e2305cf15444bc44223a3a435fe47b7b097056a98 51880520 chromium-headless-shell_143.0.7499.109-1~deb13u1_arm64.deb f745db8c80c982d37df2b640fb43a2ec0f9b2250638b7569c5f99ed4e2b81628 21092 chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb ef9711eb587d07ecbac6532ccb10610a611e16d479ba48ea51295470ebdcb3f6 107676 chromium-sandbox_143.0.7499.109-1~deb13u1_arm64.deb 30b70aa03488d7ff6d96f3d3e5b9d848704c03e136d0b8df320ccafb346f7fff 28286992 chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 6b0c6d7ffb73a0b8fcacd2efa0676a3ad4914921b3b16ca3e8e896f3f1210ade 51546772 chromium-shell_143.0.7499.109-1~deb13u1_arm64.deb db1d7625b9cb5ee870630d371039a94368fd7d3c0f9d6d34061aaa1619a22606 30144 chromium_143.0.7499.109-1~deb13u1_arm64-buildd.buildinfo 1d9a4ecd26b417b86dfff5cd1e5a920ee4ac09de275b2b5ab685d596907b9b65 69256604 chromium_143.0.7499.109-1~deb13u1_arm64.deb Files: b6fd5c84a7f6375fd4c9863fd71bf3f7 6016632 debug optional chromium-common-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb c61cce36227bef31f4875c2938ad2038 27516336 web optional chromium-common_143.0.7499.109-1~deb13u1_arm64.deb a88a70534a8a930eba2bafcd0a10dff7 32201184 debug optional chromium-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 9994f75351d069c2026e50f8ac807d71 6422632 web optional chromium-driver_143.0.7499.109-1~deb13u1_arm64.deb dc1f3221bc4f69b4906bcc2b8f0e0260 26856664 debug optional chromium-headless-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb 6ba4e00d9737d419a7090bbb494148b0 51880520 web optional chromium-headless-shell_143.0.7499.109-1~deb13u1_arm64.deb ede203564b3e6df6004d93c878fcf688 21092 debug optional chromium-sandbox-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb c5d58134cb47f79a6907df6a7b0ddb56 107676 web optional chromium-sandbox_143.0.7499.109-1~deb13u1_arm64.deb f548fb3562ac9289f7b885a3aaac06dd 28286992 debug optional chromium-shell-dbgsym_143.0.7499.109-1~deb13u1_arm64.deb e8f4497df826713e05702e149c1ecc5d 51546772 web optional chromium-shell_143.0.7499.109-1~deb13u1_arm64.deb 53a72efa07522fd5b006ec9ca3299c37 30144 web optional chromium_143.0.7499.109-1~deb13u1_arm64-buildd.buildinfo 9e9094e5e3fc193ece7927869013c266 69256604 web optional chromium_143.0.7499.109-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmk7Ut8ACgkQCr/D/stJ kDyQ4BAAkWbwfbWXY8oTZ4Sg4+V2eGmlNn4bnPcyYFUzQ7olsY0cwKsP1a7ey6cE PADpbR+2PkKrMQ3lMmltUZyhdFz8KPp2qTd20xZ8TbDrCpSmMcLr1u0m1YYgpbo/ 1tzH3FwGGlsfH9tr7WuLymIWX5HGTJz6VIx7JWZC/4wEFzjMwCd3+56v2d4Or12j rBF1wHnVu+f4qRI8xUOUFwL8y7pir8ZeTLs+NjwpVXDGoCJLKalXUIecygTEQHkk PibqpcGCbUPXGSYXdf8nH7/KrVQFBU1MUW9jevttv3ACC6vqmKrH1+02aWoChMUm QO2B4zmlXH0iDAeNCcC7KQ9yGmPPRN0lskbXGU9BrmBUoU1wksuysCp0eeqP5kpr EuO8vBWBm/UxwdRUrVd0upRkcFGB5saeZJeP4l0D4I3gk8sRS2VqrrNQ2bX46Etx /y/BbxlETv6DUzWpQbx6nB5vrwQcFBJFE0fF0BCcZRLPXsF8KW5p4BI60McyzWBh 6dCUy2/7Ju98BBTJCOB0KmvQ3+i3ZYwK5vD5W2T002ssP7bb70BygUkkyz8GIQ68 NN/94rzJbbGuIbOv0mo2efRrzw20M/9NGCkAiDTst3KqdxXWe+1/syzKI5BrRr+s 4Rq4Ao+AkB1W7r1Vppav3UyybUxc2rGCyZCZXQKxiaxSNtJ1220= =/uiU -----END PGP SIGNATURE-----