-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Binary: chromium-l10n Architecture: all Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: 387d3afded128eb5672a816ea487d219516d5be5 8509052 chromium-l10n_143.0.7499.109-1~deb13u1_all.deb aff929776a6ec9db5bfcc0b886f4ba6482dd3a07 26641 chromium_143.0.7499.109-1~deb13u1_all-buildd.buildinfo Checksums-Sha256: 90803f79a7f3a07c8df89c23431e52c80af9f27ab1af7b636541d8e6548fbe71 8509052 chromium-l10n_143.0.7499.109-1~deb13u1_all.deb 740ea9c3c8bce28aa6926ebeea6132f30d454a72b50ced48164aaf61c9297b94 26641 chromium_143.0.7499.109-1~deb13u1_all-buildd.buildinfo Files: e7cbf15316d7dd9712bdbf930edff178 8509052 localization optional chromium-l10n_143.0.7499.109-1~deb13u1_all.deb 51afe0d105169f28a5bb81a563c2babe 26641 web optional chromium_143.0.7499.109-1~deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmk7BOYACgkQx30Wh8LX l/ZV/w/9GptVoY6fjUtogExEvrfBL24e4VJbSM0+NcOCXWvgaoOjd4r05V8ausdr jK1qmwDnYc0pcFP9+zZf7AEG2kH98FHitwOVhekDQdOWz/73E8rI3rANaqlspwkX SSX1w++r5iE5u3nwKA26fzRy7HkQbQ7XvbzDXCgm5hjvNcFeQL+DQfW63fYYqhNQ Zj1kFeKcpuSux6Rttsj43ls9MZkanlUT3kiWlbe9ytC/C2yPVd7YEqg+W2FGBzza xTe4l2C8tNY5V3RiaBqnfjCvOeieLEzwp7fkwS9jZirVg1kfo4nUcMC2rXiI41SN LomW2zJcal8raPH2Xtl48XYANsenzmLc20OogOXanbjAqmI3WK+NN7aUVDKAj64C 02zmjYjyZ0n4KIrOC5wFECEx6WGfYTUkUvCIVDz7O2d/Dc8uTDg7JBrQgKi5WAv2 Ba5cDFM4QL7T0VbeytKbr/yLt9SrX9HGT8aqv2vnf/VVGikmqxUhZ3UrdqEUuqcs aH+qql6UQuynT8d6+clgBpdYYxwXQLaAWK+utRfDioD64AjMcH1JTG22SpHWE7Rf 76bUVlvQ4oIejraIrD2uPSeBZ52R8bqxocuG3RU3m/DIhROEp3Timc55hVgu6SDK nAqA1FARYh0aeNUELtAjFuSLtubVSYfzorq16wF2YWm9aJULPKA= =RjjT -----END PGP SIGNATURE-----