-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 03 Dec 2025 01:54:50 -0500 Source: chromium Architecture: source Version: 143.0.7499.40-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team <[email protected]> Changed-By: Andres Salomon <[email protected]> Changes: chromium (143.0.7499.40-1~deb13u1) trixie-security; urgency=high . * New upstream stable release. - CVE-2025-13630: Type Confusion in V8. Reported by Shreyas Penkar (@streypaws). - CVE-2025-13631: Inappropriate implementation in Google Updater. Reported by Jota Domingos. - CVE-2025-13632: Inappropriate implementation in DevTools. Reported by Leandro Teles. - CVE-2025-13633: Use after free in Digital Credentials. Reported by Chrome. - CVE-2025-13634: Inappropriate implementation in Downloads. Reported by Eric Lawrence of Microsoft. - CVE-2025-13720: Bad cast in Loader. Reported by Chrome. - CVE-2025-13721: Race in v8. Reported by Chrome. - CVE-2025-13635: Inappropriate implementation in Downloads. Reported by Hafiizh. - CVE-2025-13636: Inappropriate implementation in Split View. Reported by Khalil Zhani. - CVE-2025-13637: Inappropriate implementation in Downloads. Reported by Hafiizh. - CVE-2025-13638: Use after free in Media Stream. Reported by sherkito. - CVE-2025-13639: Inappropriate implementation in WebRTC. Reported by Philipp Hancke. - CVE-2025-13640: Inappropriate implementation in Passwords. Reported by Anonymous. * d/patches: - fixes/headless-gn.patch: refresh. - fixes/chromium-142-iwyu-field-form-data.patch: drop, merged upstream. - disable/tests.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: sync from upstream. - fixes/libpng-testonly.patch: add a workaround for a missing build target that upstream forgot to include. - trixie/rust-no-alloc-shim.patch: mark nightly feature 'no_mangle' as unsafe to make rustc happy. - trixie/cookie-string-view.patch: add a workaround for missing clang-19 feature. . [ Daniel Richard G. ] * d/patches: - debianization/cross-build.patch: Avoid "Assignment had no effect" error from GN when running outside of d/rules. - debianization/rustc-bootstrap.patch: Move RUSTC_BOOTSTRAP=1 here. - disable/license-headless-shell.patch: Don't generate the (unused) LICENSE.headless_shell file, as the rule tends to break easily. - fixes/headless-gn.patch: No longer needed, thanks to previous patch. - trixie/rust-is-multiple-of.patch: add more workarounds for missing rustc features. * d/rules: Move RUSTC_BOOTSTRAP=1 environment setting into patch. . [ Timothy Pearson ] * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - ppc64le/fixes/fix-clang-selection.patch: Refresh for upstream changes . [ Jianfeng Liu ] * Add loong64 support, with patches in d/patches/loongarch64/. Checksums-Sha1: 5ae07a5be94545457a79ad25e3b6780bbd7eea49 4090 chromium_143.0.7499.40-1~deb13u1.dsc 5afd149cc2ac44be0a3c3761dcd2dd21ee4d37be 1016232376 chromium_143.0.7499.40.orig.tar.xz 880cac02a90d93cf214fb3d0396552f5c6c33965 439560 chromium_143.0.7499.40-1~deb13u1.debian.tar.xz 06a345bb353002611587b795954494b24557d15d 26537 chromium_143.0.7499.40-1~deb13u1_source.buildinfo Checksums-Sha256: 8c774bfe12615f74e525ede0aa1ffcffddee7134610cfc7cea033fb12eed9364 4090 chromium_143.0.7499.40-1~deb13u1.dsc 8aeca2164ee3ad54e36c7e5b4349883d7d6fc4ff2a7b578e0b294bd4bf6c2729 1016232376 chromium_143.0.7499.40.orig.tar.xz 09b0bd8a3dbb056def43e954bdccc3b7e077d30bccfeb27970353e496bb4de65 439560 chromium_143.0.7499.40-1~deb13u1.debian.tar.xz dd89ce74c025532b42e5b23cb88ee147b4980b87ee2eb08906d5c0013bb81d7a 26537 chromium_143.0.7499.40-1~deb13u1_source.buildinfo Files: 9d016c34e3eda7a9ba6670fe4a6b68e7 4090 web optional chromium_143.0.7499.40-1~deb13u1.dsc 5baa25f96ba17d43bc048969d26c1867 1016232376 web optional chromium_143.0.7499.40.orig.tar.xz 26a1f88b49159259b4b65a4afe4c79ae 439560 web optional chromium_143.0.7499.40-1~deb13u1.debian.tar.xz 44b4070a477a8ca9f93082110fa0287d 26537 web optional chromium_143.0.7499.40-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmkwHB4UHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjcEixAApyYDduuh7fNnILEOlNG/aTse1iwi 5cMqrtPqwO0mEth4X8c6x2MSI+/nlw3ih/+jpOOO5O/P8H4IINY9JpHyNijc028t ekxfeFFt+QpQcQkl9R0w+BpOSweTq9GHToGUJqJyzDk2UA0n32FgqnIQ6FhU3TxB CwpojdV2BSVvIPoElWN5W6hR/2y/oZVgwen/Wozl1WYiNBXR4elh+GCsWhmBWwc4 jOvFoDnTOY/2gSLCi3J1vPmqSvWYR9J9bqjteCb7ukm+IbBWDDpfh1f/iICyWnWe aRrEU9iKuHUiRN7a9u+ObffFtInqC+9RREAFSayWaaozQY0sIl8oiBNh+nmEpuUx 0gXbGPhZ8NK58Nn0RyMOE3mVPfCv8MAS1ffT/nFmyMhSho26g+ayVzYEbK736hzB kdhV6o+cSN/LKPPKSjgSHQZ+etLEs5Bck7XPjDcu+iL4e3+vpDFXbDJF8EA6HCGc qAC025JVGoyJrZB0ycLhei2ICk7UeRsWho3SNTxZJjVsSSQDSQNHWvI8pwJsFh4X YQberfn3iQZcb+mVn3ON6lPkIuh3y2oLrn5zSELuvK/Oj8kFyyaeEYfVXmRiaWVy DopsYSsASxirZ51AbQj3HvJc+E0TMoHfR8IQTBZidTIcISk7X+qsvh70o7T7PAFo Kyjyp9j2LVz+0lg= =ZA2s -----END PGP SIGNATURE-----
pgp4hla80hlHe.pgp
Description: PGP signature
