-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 24 Jun 2025 16:01:10 -0400
Source: chromium
Architecture: source
Version: 138.0.7204.49-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chrom...@packages.debian.org>
Changed-By: Andres Salomon <dilin...@debian.org>
Changes:
chromium (138.0.7204.49-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream stable release.
- CVE-2025-6555: Use after free in Animation.
Reported by Lyra Rebane (rebane2001).
- CVE-2025-6556: Insufficient policy enforcement in Loader.
Reported by Shaheen Fazim.
- CVE-2025-6557: Insufficient data validation in DevTools.
Reported by Ameen Basha M K.
* d/rules: drop enable_reading_list=false, as Reading List is now
supported for all architectures.
* d/patches:
- upstream/arm32-crel.patch: drop, merged upstream.
- upstream/cross-build-target.patch: drop, merged upstream.
- upstream/span-fwd.patch: drop, merged upstream.
- upstream/mojo-optional.patch: drop, merged upstream.
- upstream/opener-heur.patch: drop, merged upstream.
- upstream/allowed-state.patch: drop, merged upstream.
- upstream/pdfium-libpng.patch: drop, merged upstream.
- upstream/safety-hub-set.patch: drop, merged upstream.
- fixes/media-cstdint.patch: drop, merged upstream.
- debianization/clang-version.patch: refresh.
- fixes/bindgen.patch: refresh.
- fixes/armhf-icf.patch: refresh.
- disable/catapult.patch: refresh.
- disable/google-api-warning.patch: refresh.
- disable/buildtools-libc.patch: refresh.
- bookworm/clang19.patch: drop part of patch.
- fixes/memory-allocator-dcheck-assert-fix.patch: update for renamed
config variable kMaxBucketed.
- disable/node-version-ck.patch: disable nodejs version check in
protobuf.
.
[ Daniel Richard G. ]
* d/rules: Rearrange DEB_BUILD_MAINT_OPTIONS assignments to avoid
"argument unused" warnings on armhf due to -fstack-clash-protection.
* d/control, d/rules: Apply cross-build feedback from Helmut Grohne.
* d/control: Add myself to Uploaders:, with Andres's blessing of course :)
.
[ Timothy Pearson ]
* d/patches/ppc64le:
- third_party/0001-Add-PPC64-support-for-boringssl.patch: Refresh for
upstream changes
- third_party/0002-regenerate-xnn-buildgn.patch: Refresh for upstream
changes
Checksums-Sha1:
2ef759dedc59e5f4fc05e5797c9e9f98b2d09de0 3982 chromium_138.0.7204.49-1.dsc
baaaf4cb66ff22fe467f6b09002763a9eb2790a7 965122316
chromium_138.0.7204.49.orig.tar.xz
db11c75d9ad354d352d6da6c9edf6510f514eb8b 399784
chromium_138.0.7204.49-1.debian.tar.xz
f40810d6b19f65cf60cb0e7fe9c06c374fc8ce5a 26455
chromium_138.0.7204.49-1_source.buildinfo
Checksums-Sha256:
242b3709ff6239a7d247bb2e30fb39f60a8e80214a5c1f28be356163e81b3f4f 3982
chromium_138.0.7204.49-1.dsc
4a7e98cf013a5a7a5e08af717eae0cf0fa7f54c0b1b5d61a2cadf00f71305765 965122316
chromium_138.0.7204.49.orig.tar.xz
014bbcaea22cf07ecd4736eba736bd4795ac2732e2ecd6ad7fd7e1eade94bb2a 399784
chromium_138.0.7204.49-1.debian.tar.xz
b3238c10af972efc93d3ee69b36b50a29f4b5ede0085bc7b52294192f32460a2 26455
chromium_138.0.7204.49-1_source.buildinfo
Files:
80af3ef2ee633538de921e6ad878b778 3982 web optional chromium_138.0.7204.49-1.dsc
a2b6c2d0191179fca588b740caf380e6 965122316 web optional
chromium_138.0.7204.49.orig.tar.xz
90605035477c3b8aeaa73f1cbe7b2d7f 399784 web optional
chromium_138.0.7204.49-1.debian.tar.xz
69348fd77547fc8396291226c0feb1c9 26455 web optional
chromium_138.0.7204.49-1_source.buildinfo-----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmhbpz4UHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjfJwA/9G+3uwqw6r8hE3Qr+BqgI8wYrZaJK t1mmFqyyOX8Dk0rCHyhzqHfn2i1ebf2y6ct4leuFC2u0rNbufBdwIZECuI6Ha22R ZEsNeg3hsIcoa/FcOAzIS1j4Vumg8J1y0hFgzl/fG6HdxTZgob1yNyN+OI0dCehe Upt7iSbVp3a+qsvH75VdBf5fhTZQ4wl6dQopaQv/aSRD0CLSgmiWmPJhSz+3QC9F NHw0MU+S3ro1+MQyJccYrS2l/lePjs5tBzTVnWjOSYLNMLvi1ZtN8vKiH0+PdsYF HgD+dxAi/0C6M5r7KlOXCfTwAX8JCLKxCoA8jJ4r3yHd4RJe4sA5f+LsDfQ67+iw eD+N2LddGGj/BHSzxy0Hu6RHRqKRKNQyg0e7ea3c40l4k94YOhWFOlq5bZajOzuL cbT96am96agNzhLUDWnXLV9Kpvm/NthhNVHtb9PBI4KNLN/WcEuCGkiC8Su6RTUR 9Fbk3uydlDAU9eNXA7K1myzSr1YiCDmJarMVIDgjv7oT8AEpWf5JcHasqZ81wZLs 72nhntoHiOsLUkOuFyc7uCwoetr1YRnIlBjXB9fcsKyDyAg/DWpjr4hg1qERH9cI xN9Q/wv/h5OIbMiR1+SbzhnDGud9dNdM2UfyrMSxEmo2MsGYI9ReVsHPue2dsnzm r7BBSbxl/BUaerE= =BTw1 -----END PGP SIGNATURE-----
pgpm9bAlDHuKK.pgp
Description: PGP signature
