-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 10 Dec 2025 22:14:03 -0500 Source: chromium Architecture: source Version: 143.0.7499.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (143.0.7499.109-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-????-?????: Under coordination. - CVE-2025-14372: Use after free in Password Manager. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2025-14373: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. . [ Jianfeng Liu ] * set use_av1_hw_decoder=true for arm64 and add build dep linux-libc-dev (>= 6.5). This will enable V4L2 stateful/stateless AV1 decoder found on some arm SoCs. * d/patches: - upstream/fix-rk3588-v4l2-av1-decoder.patch: Fixes upstream issue https://crbug.com/464638992. This patch is backported from v145 and will fix green frame issue when playing av1 video on RK3588. - ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: fix FTBFS on ppc64el related to conflicting kernel_stat patches. Checksums-Sha1: 3821357799777d5c7be93fd1897bd0a2004a1c74 4119 chromium_143.0.7499.109-1~deb13u1.dsc 96ebe804db4181d9c936c38f83a47b4cf511cc7b 714315812 chromium_143.0.7499.109.orig.tar.xz 95e22d4e84ab4dbad7610f8599d62c85eb9f030a 441088 chromium_143.0.7499.109-1~deb13u1.debian.tar.xz efcc5a893472f8d32ee027b2a1ca8d15525ee23f 26541 chromium_143.0.7499.109-1~deb13u1_source.buildinfo Checksums-Sha256: 3d0c691accccd96c300413e3852433de07ec0516a9e2e3e77ede6c90f74c08e0 4119 chromium_143.0.7499.109-1~deb13u1.dsc c20a7f0e317728e49f047840828cad4fefc7ae385bd9e4f063e7c22fa3dd914f 714315812 chromium_143.0.7499.109.orig.tar.xz 1fba16601fa92ccec3664ba17976f0439f80651b8b3c8429e3bfdeef9411edb7 441088 chromium_143.0.7499.109-1~deb13u1.debian.tar.xz a819d1d069143427abf1b2ac4db25296788b421f5f0a5921f4521385d5447172 26541 chromium_143.0.7499.109-1~deb13u1_source.buildinfo Files: d9d32e07de894c8c7b2537b19a26ecc4 4119 web optional chromium_143.0.7499.109-1~deb13u1.dsc 6eb776ee2fd28c858e00e9cb18ffaebd 714315812 web optional chromium_143.0.7499.109.orig.tar.xz c4fb64ac45d8b527aee65e2e554216a7 441088 web optional chromium_143.0.7499.109-1~deb13u1.debian.tar.xz e9bbdd2129c1a223eadc3960a166ac3e 26541 web optional chromium_143.0.7499.109-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmk6dUQUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeAaA/8DSja13pbXMdnczncMfDd0M8cdJjY F4jhk/59zlX1D7NQPdbqVgtYEFdO86eiEoABahnJ01gkUmmjuf5YsJb8gYkhvthQ Muz7hMdECLFCfWokamQRvVpjo+FcYgMawQTJHMsT+Trr93VpdRqRKj7Xrqd4eQwe b9H85/U7dMfATuAx0ubnZ0e03XAUV0QHCDdLzJCBnqNOG75U3tA7CeFHkq4Yyrun 17JmJwlICbplMb9LYzAw8zIq/EilpPt0dgqHyp58U4YeNTG58blnCebVKn0CmHmt P6GDQUzN7vjHhlLRjmR9Wz3o9UTSetXY9s6VHXrIg7rf36gtylIT1INlvMjy/7mi yqc/zGxdJ/rgLc8YuyjG2ZpG6xq6KsdTcpLQTkp6xLm/ai7S8VK6E8UsMN9MFGki CKvQS9ZOFlWWsTevU4E2Zh4SMtriJLztotX/kVW3xXu6jkozlTm7tDnlNiOLE+W0 8u299n9AabySFA5wwzNK4Hwdh2io6HMfgBMEbm+A+pdxtGDy43UkkkZUEz2w90La joC80UcQDIqC1ZQkN5XfOnNDV4GYTbyy33xwPxI/2FBHxCcXlDogwtx+hV+63O89 +vQ9FQZSeMXuIBDQ14Z3Nyb2R8w3cLoYt1RllHI9NGcQq4EGHHnfHBZjOXoVVFDA LmCih0GNt1Qhp2k= =kURu -----END PGP SIGNATURE-----