-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Sep 2025 16:47:14 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 140.0.7339.80-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (140.0.7339.80-1~deb12u1) bookworm-security; urgency=medium . * New upstream stable release. - CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team. - CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. - CVE-2025-9866: Inappropriate implementation in Extensions. Reported by NDevTK. - CVE-2025-9867: Inappropriate implementation in Downloads. Reported by Farras Givari. * d/patches: - fixes/armhf-icf.patch: refresh. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - disable/widevine-cdm-cu.patch: refresh (and make it shorter). - bookworm/clang19.patch: refresh. - disable/android.patch: delete a new reference to chrome/android/. - disable/buildtools-libc.patch: drop due to upstream cleanups. - trixie/rust-no-alloc-shim.patch: add a build fix for older rustc. - bookworm/rust-visibility.patch: drop, not needed w/ new rust 1.85. - bookworm/crabbyav1f.patch: drop, not needed w/ new rust 1.85. - bookworm/toktrie-utf8chunks.patch: drop, not needed w/ new rust. - bookworm/derivre-create.patch: drop, not needed w/ new rust. - bookworm/rust-split-at-checked.patch: drop, not needed w/ new rust. - bookworm/crabbyav1f-macro-scope.patch: drop, not needed w/ new rust. - bookworm/rust-box-to-vec.patch: drop, not needed w/ new rust. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0002-regenerate-xnn-buildgn.patch: Refresh for upstream changes - fixes/fix-study-crash.patch: Refresh for upstream changes - core/add-ppc64-architecture-to-extensions.diff: Refresh for upstream changes - fixes/fix-unknown-warning-option-messages.diff: Refresh for upstream changes - libaom/0001-Add-pregenerated-config-for-libaom-on-ppc64.patch: Regenerate from new upstream version - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Regenerate from new upstream version Checksums-Sha1: f24a63a4fdbbd39af833f2ad7e9a8e111b7d3009 5474800 chromium-common-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 8eebc8ac0aa3eeb4744cb5be2106be90d43e75da 22196644 chromium-common_140.0.7339.80-1~deb12u1_armhf.deb 6ace435d72f3333e490ad25031603a200eb1aea9 33022460 chromium-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb f57376bba03ffdbaa5db53bc380151ff116a39f0 7301108 chromium-driver_140.0.7339.80-1~deb12u1_armhf.deb 3c95b07c2962e03e2328ebcba67c4041a090aeb0 26039816 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 5ef04291cda5a76d5dfb0d83168ff22a42f77960 51356744 chromium-headless-shell_140.0.7339.80-1~deb12u1_armhf.deb ac0a7d8c955e295dfb3050260b5d5787a589dd25 18036 chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb c05ce5e3525790960d0010e3cb1c6547c4437876 106096 chromium-sandbox_140.0.7339.80-1~deb12u1_armhf.deb da6649d97c5605b929cfb9df9c98ddaf2332fc01 28211956 chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb bcdb076f2c7409e7a27ba4606fb38c14ea203389 55957876 chromium-shell_140.0.7339.80-1~deb12u1_armhf.deb 059acae39b3635c34b17091ad77d0634ef458272 30169 chromium_140.0.7339.80-1~deb12u1_armhf-buildd.buildinfo 13762ec4e4aacb4be34dc1106c7e6ddbd99b927f 66643492 chromium_140.0.7339.80-1~deb12u1_armhf.deb Checksums-Sha256: c96f43f59a524451e7c63d0bed7fdd7982a0cfbc4ffe370239b14bb42fd67621 5474800 chromium-common-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 39e0f9e10971d41cbf0702f61574aa539e8235c70626d502acd5d3e5f631f2f4 22196644 chromium-common_140.0.7339.80-1~deb12u1_armhf.deb 74b9014442b9395d9859180152a8f81792a5eba22d2aeb1c7026d2a5b9d1cb7a 33022460 chromium-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 578ffe903d1932dbda76e1c8351a2661e125827ac45ef8fc007f95b0468e3673 7301108 chromium-driver_140.0.7339.80-1~deb12u1_armhf.deb 25c0193c83fb5215224202cb3ab579c05289f186b7a74b726017eb7792d9ae70 26039816 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 22b7cd431f7d69d611136d100be7db521f7f242901c7d1ea21f46aaf481ac7db 51356744 chromium-headless-shell_140.0.7339.80-1~deb12u1_armhf.deb 60d692091f7e45d8cfcda3fc57b888d2b2900f6660710e83dc9c368e6f4da426 18036 chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb c280071c7d75943e1043bb3b1c132c41877db178cf30098833e2f47886c9abfc 106096 chromium-sandbox_140.0.7339.80-1~deb12u1_armhf.deb c7d624ee69ee59c2c751733053ef36e1af27a6fe3b89851646d3ab9ee970bae9 28211956 chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 7d74ec5ba9f70f0eba5e6a8d1046a064b641ec25049758c7ca64fb07391186d0 55957876 chromium-shell_140.0.7339.80-1~deb12u1_armhf.deb 5d535e2c27ef4a19fa25d325740815ffb533d7d865523d109f0d3264e40c4c2a 30169 chromium_140.0.7339.80-1~deb12u1_armhf-buildd.buildinfo d748d9ea11f8d1f9c0362741c8e4c3c2990f896ca78e3053fd7ba94fae0ac5c8 66643492 chromium_140.0.7339.80-1~deb12u1_armhf.deb Files: 46cdd24e23156b6a0b16699e1f41504b 5474800 debug optional chromium-common-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb f9f17aad6c5ea7deee2bdb00961d8b4f 22196644 web optional chromium-common_140.0.7339.80-1~deb12u1_armhf.deb 10280af620de4be807683d9dca9b882c 33022460 debug optional chromium-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 466225afc814c9e3053be29a99b27544 7301108 web optional chromium-driver_140.0.7339.80-1~deb12u1_armhf.deb 864a947add00a1cd6080eff514ac6ef7 26039816 debug optional chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb 6310654f04bd229d4a3edf409fab7c79 51356744 web optional chromium-headless-shell_140.0.7339.80-1~deb12u1_armhf.deb d6f0e076216a7cc72251746e04053a7b 18036 debug optional chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb fdb7d7d4eea12773d323adb2fab1af12 106096 web optional chromium-sandbox_140.0.7339.80-1~deb12u1_armhf.deb 24436e555972e19847dd10175c86960b 28211956 debug optional chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_armhf.deb f0c021da0ad1fc18e7e10d778a387407 55957876 web optional chromium-shell_140.0.7339.80-1~deb12u1_armhf.deb 6d58aa45e67ee7baefd769d1c64c5969 30169 web optional chromium_140.0.7339.80-1~deb12u1_armhf-buildd.buildinfo 6211ded71b32ad27ed7d65b26dca29d9 66643492 web optional chromium_140.0.7339.80-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvEwFZ4bqkVI+Rh6t+N4VxR6LZYEFAmi7FSEACgkQ+N4VxR6L ZYGsWg//eoAy1+yy5I1qzo3cb3eFGuknyT6OZvMCVcdu3cU0JC9dLKNua9CgZOLW 5/j6AS6a8Ofu/HiMLjx4qqVDOeyOAaiyvrSPYo4PwOHzmWzp1Jlx7nlIbnerykw2 zqKE85r/zqwPRiaOVj1+Muf5ufi2KNnPar5KlZeBhEhA5RYJeOAw0DAChGOZuQUn XqMmUEplQj7yf3bK7DmwMPxSBJ4B2lwF1JkJrsqh3LMrpiAYvEN/vvNgtvsJJxL6 UPUutmAHTPqRUXBpg0OdJiO/3TZTTTxT7kWkQCMQwIAzGDqcyFp5FgsWHyPEP1jZ HHFw5mDRQfHEPZXnzAxM31a22T/JLgw5Yl3d4PeQVP364/Jpv9Woi651pOnjo+TA MGRULNdmGrs0j5gJNNkf9MnxGr542Fzy7MVUqVDyq9RgC6kp91vMAeDODFpT6EY3 VHifJEYvjD9SfjSW3DcGPOCWxD4nVM4M9hoz41yljRlBlEDTGO0oNAyFDfeKPQwV CfxshCuZwZL0m47gEygobcHrKW7J+fGeHO4Aezhias9RQMU5CEeBTRaQbk/pWd37 LI1lLI0dEajYaXTfB33hwHiPu0tkOFCPdcMnJTLrVFe4z602C5cWF+js8rfkIOim onWagEYT+LtNOwvC/dPzGkRKdxjIaxa+Cqnb21UPKBXoQKH+1yI= =nsbj -----END PGP SIGNATURE-----