-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Jan 2025 21:20:43 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 132.0.6834.83-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (132.0.6834.83-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2025-0434: Out of bounds memory access in V8. Reported by ddme. - CVE-2025-0435: Inappropriate implementation in Navigation. Reported by Alesandro Ortiz. - CVE-2025-0436: Integer overflow in Skia. Reported by Han Zheng (HexHive). - CVE-2025-0437: Out of bounds read in Metrics. Reported by Xiantong Hou of Wuheng Lab and Pisanbao. - CVE-2025-0438: Stack buffer overflow in Tracing. Reported by Han Zheng (HexHive). - CVE-2025-0439: Race in Frames. Reported by Hafiizh. - CVE-2025-0440: Inappropriate implementation in Fullscreen. Reported by Umar Farooq. - CVE-2025-0441: Inappropriate implementation in Fenced Frames. Reported by someoneverycurious. - CVE-2025-0442: Inappropriate implementation in Payments. Reported by Ahmed ElMasry. - CVE-2025-0443: Insufficient data validation in Extensions. Reported by Anonymous. - CVE-2025-0446: Inappropriate implementation in Extensions. Reported by Hafiizh. - CVE-2025-0447: Inappropriate implementation in Navigation. Reported by Khiem Tran (@duckhiem). - CVE-2025-0448: Inappropriate implementation in Compositing. Reported by Dahyeon Park. * d/patches: - upstream/blink-fix-size-assertions.patch: drop, merged upstream. - upstream/dawn-strlen.patch: drop, merged upstream. - upstream/mrc-copy-op.patch: drop, merged upstream. - upstream/variant.patch: part of this was merged upstream; keep the rest. - fixes/freetype.patch: drop, merged upstream. - fixes/gpu-crash.patch: drop, merged upstream. - fixes/bindgen.patch: refresh and make patch even smaller. Also some upstream churn. - fixes/fix-assert-in-vnc-sessions.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: refresh. - upstream/mojo.patch: fix missing files. - upstream/uint.patch: add gcc-specific build fix. - bookworm/constflatset.patch: add (probably) gcc-specific workaround. - fixes/lens-optional.patch: add gcc-specific build fix. - bookworm/gn-absl.patch: modify for new dependency. - bookworm/rust-visibility.patch: add build fix for older rustc. - bookworm/less-void.patch: add build fix for older libstdc++/gcc. * Downgrade to rollup3 for devtools-frontend stuff, due to the bundled rollup4 including wasm blobs. Update d/patches/system/rollup.patch to point to the right place as well, and build-dep on node-rollup-plugin-terser. * Build against newer bundled libtiff for memory limiting protection. * Switch to bundled libdrm due to DRM_IOCTL_SYNCOBJ_EVENTFD usage. . [ Timothy Pearson ] * d/patches/ppc64le: - workarounds/HACK-debian-clang-disable-skia-musttail.patch: Drop due to upstream fixes - third_party/skia-vsx-instructions.patch: Refresh for upstream changes Checksums-Sha1: aeb273552d6bb17804088d285ce3371b18b5b2f5 4764116 chromium-common-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb b79e1e4895668dea87b00ae2976ab3169782e06f 10143448 chromium-common_132.0.6834.83-1~deb12u1_amd64.deb 0a2ba316ddbdf9a7f921f67d4e5c08367c404adb 32148688 chromium-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 51d6719e6fe3f26fca24f873082a179f5fcc044d 7415900 chromium-driver_132.0.6834.83-1~deb12u1_amd64.deb 606a5645ecce043f7a024689b900c5c392b81bab 14072 chromium-sandbox-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb fc14648cc4300281e3afae78471bf4e434dd2047 99012 chromium-sandbox_132.0.6834.83-1~deb12u1_amd64.deb 5b19d8e97fe08b4331ea0d7475d0fb6037ef3afc 26438488 chromium-shell-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb bb660a68466bb369a617377dec8bb83918a010cb 53414612 chromium-shell_132.0.6834.83-1~deb12u1_amd64.deb 14b5fe086f6f5558113328998398d148079fb227 29404 chromium_132.0.6834.83-1~deb12u1_amd64-buildd.buildinfo a66e6949ced011efb19ff38d80976cde93ed7047 87291612 chromium_132.0.6834.83-1~deb12u1_amd64.deb Checksums-Sha256: 0e1fcc006caef9e5e2a28e592ba414a45f12b78ac0bac66df96911183bf1b44e 4764116 chromium-common-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 8f03775c6f67d23e8261d038e8a87c54cec8fb00342d814b0e7c2e821981d632 10143448 chromium-common_132.0.6834.83-1~deb12u1_amd64.deb 779a4e51fc4dc6aa1840e5f30e52e1af56feac4864e7d2491e31f8c056dea6d7 32148688 chromium-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 06500835a91b703718a3c42932cc70cfe9178cfcbea6620d88b8faa34385596b 7415900 chromium-driver_132.0.6834.83-1~deb12u1_amd64.deb c54ae512e82eb7aaca71ae4041fb0cea389c40c9e65f4bbd066266a55688b862 14072 chromium-sandbox-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 5daab01c688a7e5fdcb0401d5981fabac8876cac699cde61950ebeffbf34d601 99012 chromium-sandbox_132.0.6834.83-1~deb12u1_amd64.deb 8f9362e8783efb97c6de91e8d10f4886fde3334125c8ea966b5f4bd42d3a0603 26438488 chromium-shell-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 1590bd248d14d72bb899f0feb709a67ffc0052924084317be4b248c0e354558f 53414612 chromium-shell_132.0.6834.83-1~deb12u1_amd64.deb d62f94bb4c429b6ad3a328f09a4a5e8003d47d304fa02257b36e578a4f54a420 29404 chromium_132.0.6834.83-1~deb12u1_amd64-buildd.buildinfo 167553359b15e7a0beffc7f696f62fe712c5448cb1870f8fbd427389cb4ed8c4 87291612 chromium_132.0.6834.83-1~deb12u1_amd64.deb Files: 1af512a710e8549b1ed98d5954b5088f 4764116 debug optional chromium-common-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 99b6ba0f8a8d8c21474eaf3f8507a45e 10143448 web optional chromium-common_132.0.6834.83-1~deb12u1_amd64.deb 84744c19e79fddfe18210f00a2478886 32148688 debug optional chromium-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb b05eccd80075ff19d8a99db429f125e9 7415900 web optional chromium-driver_132.0.6834.83-1~deb12u1_amd64.deb dd296bf03e15d31bd4958044ee2d15d4 14072 debug optional chromium-sandbox-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb e4120b19a95271f6aa2c00f33cc6f17b 99012 web optional chromium-sandbox_132.0.6834.83-1~deb12u1_amd64.deb 83e99413d57e7bf15a4c5d2a8ad51bcb 26438488 debug optional chromium-shell-dbgsym_132.0.6834.83-1~deb12u1_amd64.deb 3f0fe1afd756ee111645cef0226566f5 53414612 web optional chromium-shell_132.0.6834.83-1~deb12u1_amd64.deb 4afb47d53ccd765fc1e1c7d70c3a7eaa 29404 web optional chromium_132.0.6834.83-1~deb12u1_amd64-buildd.buildinfo 134710ba6e9f04dad78c606d3142b08d 87291612 web optional chromium_132.0.6834.83-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAmeHwwkACgkQ3KGKEAtj IVi1pg//UYwOmQ3EGp2ccmC1z6jqVpvfrzsljxnY3JBs0UpILIqVTcZk2F6VqvIc y0WKVLJ4rXMlFe183oFHmtykl8DHLsYM23m3cvGdoqBpdKGcR96ZeD3oKt1jY+2o f7K9XglgU3eFQSXlorh3xmdMztWdyDLFVJAqjp/P1QmYetNq88CUY+srGvxKBxEU 3Sb2fBqtzAjrqNPmWdHVsk86qmcxzkxkg73m+66+b1SwATp6IZKtGRX1Y9uhgKXk /PCCFBVShw0e9wOP1GNu2bZ8mdsng4KNgR+eckKwXLIkmb5bVLbvdkfpNAdvhoIc Jhcny7HYyeObttuofz4SjDwTEN8kb+nGWzCobFx8RXHMA7cgRtfatn724ApntHMg AyZKeDCJ3/hCS3BuDpvE6awiFI3RXKXW4jei2y17mbZkelQ98gwecfmYqjdFoPl3 x3sLR1fqNRw4IIgFi06PkZNRuxwKjtZoxjs3rF/KGwcCCoSC7fwndbIA9D1RoA1+ W0FAXQHr7F8lMr4sFamP/kOAldYrt54Du1hl1w3KyCn68UPJBomLsw4pHIxSu2Ho l1LVQL1gBpEKuqqiRGNovGqJ+V5lGRJgDoRYZEc8sFV23PrJQPhtW75xduCcFvYG oLxZ+TkXwSWzTYK4OxFzzLtskEXtSVhLDJlsEZ3eIHcssZdRLSI= =yGsw -----END PGP SIGNATURE-----