-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Architecture: source Version: 143.0.7499.109-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (143.0.7499.109-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. Checksums-Sha1: 19c7edc05e6c5274ed4906266375c41d12ea42c6 4063 chromium_143.0.7499.109-1~deb12u1.dsc 96ebe804db4181d9c936c38f83a47b4cf511cc7b 714315812 chromium_143.0.7499.109.orig.tar.xz d6cfa609031cc201faf89f4457bfbbb540894d4b 8528044 chromium_143.0.7499.109-1~deb12u1.debian.tar.xz 7c70fe6a537e08081c303d7fbd58b8ad42f9d757 26772 chromium_143.0.7499.109-1~deb12u1_source.buildinfo Checksums-Sha256: d707145fd14816e79034e69fa72c96d3562e08040a22ee8f5fb3e6baf055958b 4063 chromium_143.0.7499.109-1~deb12u1.dsc c20a7f0e317728e49f047840828cad4fefc7ae385bd9e4f063e7c22fa3dd914f 714315812 chromium_143.0.7499.109.orig.tar.xz b32fd8e027f9836a3b0ba3b4f7723a12f87307978169fe1acd24b8a87f7a6d9c 8528044 chromium_143.0.7499.109-1~deb12u1.debian.tar.xz 5a00069b82c63c32425ebc7b32b5a8f0010f9c49c28e0e7fd9d2f2fae038038e 26772 chromium_143.0.7499.109-1~deb12u1_source.buildinfo Files: 306f4f7760b21b90324690cbdaf83e9e 4063 web optional chromium_143.0.7499.109-1~deb12u1.dsc 6eb776ee2fd28c858e00e9cb18ffaebd 714315812 web optional chromium_143.0.7499.109.orig.tar.xz ede26c1b369b2e0cf5099c9c6dffe4d5 8528044 web optional chromium_143.0.7499.109-1~deb12u1.debian.tar.xz 9960b1cf1d8ec66123e28ec0827c9059 26772 web optional chromium_143.0.7499.109-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmk6q2cUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjcdfg//S0lj0HAXLpBaBTm9161Cu2Ct5s7E IWC4hPL8+KwJAGtuH+uYI9DeKZadGdplDE2GVmq4hnadIaSU/t9OL5Kl+7B3bhhj cH+jSrQS4lwu38Erzg/MopzXIgIyPYSFQ6PMWCV4mgO4IVv4VNdfazhJVBkHpKiL Q7HgRrXaEaL0oxdeWq1vo8zfWyFZVfAGvbDpfprxrgBa423GukpcmzVlPI+sGnxq s1h2VIT8Eb+PtTwbD/aX7JYqQ1E66Zl7z/9mNgfsl7+ZdLyEKFYxG1TcKOz+/pDn 4f/3soFvPDcI1PJNSvcgV+4UvbtYTHUBI+UhIa0pGn/vCQYmZ/1Y/ejb5yamCe+0 Le+Za1VOphzdpLXG8IAzdbbGeiF+8SPKTGxv5kR4zZEOGbH0Su4kj4HDypcD0oDM RwMs9QUBpJPeQFkTnKDxPoCh4fHZTe1usbGcibTNm6y1Au4288RHQM6ZzrOFc8Yu kZfRpXt3uSL72eWw5wOojnF6il4eANEoipJTykSQikY+mZ0Zu9OB9vXyfdW8ZthP 4aR3ZLEDX+bnFoDHutXbzz1UFQUjTWvRjzf1N4sVRQqloJy8AugZlGthpINxNJUi F3zt+Mu3xuYI6vE9bODg+P+hM3oXEm4pQTV85c1ZFUlwWHExoi8abmpRpNX+R4qi wS9UvP+PjsHtFVw= =YN1z -----END PGP SIGNATURE-----