-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 05 Mar 2025 13:26:45 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-l10n chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: source amd64 all Version: 134.0.6998.35-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-l10n - web browser - language packs chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (134.0.6998.35-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2025-1914: Out of bounds read in V8. Reported by Zhenghang Xiao (@Kipreyyy) and Nan Wang (@eternalsakura13). - CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Reported by Topi Lassila. - CVE-2025-1916: Use after free in Profiles. Reported by parkminchan, SSD Labs Korea. - CVE-2025-1917: Inappropriate Implementation in Browser UI. Reported by Khalil Zhani. - CVE-2025-1918: Out of bounds read in PDFium. Reported by asnine. - CVE-2025-1919: Out of bounds read in Media. Reported by @Bl1nnnk and @Pisanbao. - CVE-2025-1921: Inappropriate Implementation in Media Stream. Reported by Kaiido. - CVE-2025-1922: Inappropriate Implementation in Selection. Reported by Alesandro Ortiz. - CVE-2025-1923: Inappropriate Implementation in Permission Prompts. Reported by Khalil Zhani. * d/patches: - fixes/widevine-revision.patch: drop. Upstream says "with CDMs using manifest-based registration, no need to" hardcode version string. - disable/catapult.patch: refresh. - bookworm/clang19.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: refresh from ungoogled. - bookworm/gn-allowlist.patch: add workaround for older gn. - bookworm/adler1.patch: add workaround for older rust. - fixes/stdatomic.patch: add build fix to ensure isn't used. - fixes/variant.patch: add missing header include. - upstream/qualifications.patch: add fix to silence annoying warnings. - upstream/optional.patch: add more missing header includes. - bookworm/constflatset.patch: refresh. - bookworm/constexpr.patch: refresh. - bookworm/modff.patch: add workaround for libstdc++ build issue. - bookworm/foreach.patch: add workaround for libstdc++ build issue. * d/rules: update to ensure both qt5 AND qt6 are disabled. . [ Timothy Pearson ] * d/patches: - fixes/swiftshader-llvm.patch: Add LLVM patches from upstream LLVM project to fix integrated SwiftShader LLVM FTBFS * d/patches/ppc64le: - third_party/0001-Add-PPC64-support-for-boringssl.patch: Refresh for upstream changes Checksums-Sha1: c993bc185f18537e16d8d06d0628880425eeab3a 3869 chromium_134.0.6998.35-1~deb12u1.dsc 332fa8cd06755604d127cd35ed7890a40dd22664 915150532 chromium_134.0.6998.35.orig.tar.xz f397a11c8d235cae2e0b33eb758faab6bc3d259e 8421080 chromium_134.0.6998.35-1~deb12u1.debian.tar.xz 1547c44191a1e5dd4cd08d2477393f210a68ed07 4750796 chromium-common-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 7cc20ec61d30626c00a8fe4bb3c715bfa5e351a1 20253176 chromium-common_134.0.6998.35-1~deb12u1_amd64.deb 165fcdda7a45a3d0470a23a1eca322525089ff27 30378748 chromium-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 401ddcf57b8f6c9ae3d5bcbc5c84b3c1f28def8e 7527080 chromium-driver_134.0.6998.35-1~deb12u1_amd64.deb cf8564bf7df7f64073d0e73372eca1f6624a430a 26022088 chromium-headless-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb fc48c7a5bc603e523bfe475ad75d3cb5373a0f58 58055524 chromium-headless-shell_134.0.6998.35-1~deb12u1_amd64.deb cfc5a691186b432eb1f177c6fda0a7d7108fb2ec 8085168 chromium-l10n_134.0.6998.35-1~deb12u1_all.deb 331a1b54df1375c12a8c00f8ddb5e4a0cf025ebf 14068 chromium-sandbox-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 8b3c5e767d32b366037fd34e054bf776573484d0 101104 chromium-sandbox_134.0.6998.35-1~deb12u1_amd64.deb d80814cf5fc84a64c569dc612115a6da680c256e 25299312 chromium-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb e09ccfe67b8af2f79d8b81467ca143a821fb1e6f 53617068 chromium-shell_134.0.6998.35-1~deb12u1_amd64.deb 5a68b9f3e5b885fd70b1e48b9f7eef09c0ebad57 30923 chromium_134.0.6998.35-1~deb12u1_amd64.buildinfo 064b41fd7320c28c336081fdedc9749c9a091569 78236272 chromium_134.0.6998.35-1~deb12u1_amd64.deb Checksums-Sha256: fb8375f9d5ebde9e4bee266884f729345c05d0963c1ba4af5f0d927af16c17a5 3869 chromium_134.0.6998.35-1~deb12u1.dsc e5c25afaa1adbcc671f16ae7166e71bed20a01c99f979564cddafdf2ae2b1613 915150532 chromium_134.0.6998.35.orig.tar.xz fc1f0be73a188606c0beb882c97a18072d6e4449b3301668ddcaf150cdf3e30f 8421080 chromium_134.0.6998.35-1~deb12u1.debian.tar.xz 36a441c536dbd7471b0071676db86c6f6600248965c34f3ca4869694a10c32ff 4750796 chromium-common-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb b565ef129f9b6da05f9f472abf246bbcd66fc711d5c6362b70c0b4bfb1387d59 20253176 chromium-common_134.0.6998.35-1~deb12u1_amd64.deb f4e936822ee284e0e1c759fdf8039d8133aa4f812c0301b59ab79e46ba123309 30378748 chromium-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 56ed381889d8f396100d0a53b75855c2f7c13b09e408d7ac3ff3eae783aed347 7527080 chromium-driver_134.0.6998.35-1~deb12u1_amd64.deb 7a7c8d389135c7c060c6be7bc76139be8c4ad57b78b9435e90b748cdd45c4ee1 26022088 chromium-headless-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 26da548ed74ec7884727b6e0936cbdf68cd12a3fbb07239b6651c62d042e6c93 58055524 chromium-headless-shell_134.0.6998.35-1~deb12u1_amd64.deb 3b33711cece2bb47d00b2df8f1f9fa7e110a06ee16a5c227c7b18f28a5c383b3 8085168 chromium-l10n_134.0.6998.35-1~deb12u1_all.deb ea7a0ec66f3fb8ed0a509faf8e4720609f406b0e4a5232e52bf952f159f953d1 14068 chromium-sandbox-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 614bef018a5e93a6ff9d0423c041d43bd3142512509cbbf85c1802acef5c5729 101104 chromium-sandbox_134.0.6998.35-1~deb12u1_amd64.deb 0c1ee25a77b076eba63f8e4728f31b2a38b872404c2cb167201fa3ea68a566e2 25299312 chromium-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb b3fb74cd4ff58116cc73df2f691973484e7a02e17ee8a9b257658832bfc8607c 53617068 chromium-shell_134.0.6998.35-1~deb12u1_amd64.deb d36528b570ffd36b5875f505ae33dc16440cce7be92947d59fa606d3da99dfe2 30923 chromium_134.0.6998.35-1~deb12u1_amd64.buildinfo 754c4ab012dfb3941de6c460426e6de63370803547d2101c944e73b374f6f4ff 78236272 chromium_134.0.6998.35-1~deb12u1_amd64.deb Files: 57bfac85f0bb0589de5f5302b036074b 3869 web optional chromium_134.0.6998.35-1~deb12u1.dsc 07428b758264b61deee55a23a3cf504e 915150532 web optional chromium_134.0.6998.35.orig.tar.xz 66e9cd9d8243318f2f53eb0a5d2ba0f1 8421080 web optional chromium_134.0.6998.35-1~deb12u1.debian.tar.xz 75a92f3c47cd0edf514c34105b0699d2 4750796 debug optional chromium-common-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb d6cfb989b56fd95ff8ac4c23ce7db0ef 20253176 web optional chromium-common_134.0.6998.35-1~deb12u1_amd64.deb 217933be1c2b7a8e472346e6c5fd0053 30378748 debug optional chromium-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb b8d04bcdecc3a163f09a120700ee68cc 7527080 web optional chromium-driver_134.0.6998.35-1~deb12u1_amd64.deb 6d421a650558136216c87b4e8cb86e98 26022088 debug optional chromium-headless-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb 6ca4ce38ea5af5ce2659c0a76cdb4c2c 58055524 web optional chromium-headless-shell_134.0.6998.35-1~deb12u1_amd64.deb 165512ac2c5d84490cad67d0d989ba8f 8085168 localization optional chromium-l10n_134.0.6998.35-1~deb12u1_all.deb 0d763e6e2187d2c29b87cdedad7816d9 14068 debug optional chromium-sandbox-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb ec3dee491d001face46c713f7d90ec5b 101104 web optional chromium-sandbox_134.0.6998.35-1~deb12u1_amd64.deb e574456bdc7ec2fb852bb1d73a5e7343 25299312 debug optional chromium-shell-dbgsym_134.0.6998.35-1~deb12u1_amd64.deb cc28aa96012a9f1c9d4d18e18fb77cab 53617068 web optional chromium-shell_134.0.6998.35-1~deb12u1_amd64.deb 324a3ce74efa51d05016ebad6816c416 30923 web optional chromium_134.0.6998.35-1~deb12u1_amd64.buildinfo 85b80d930e26d82886231b49c9bab310 78236272 web optional chromium_134.0.6998.35-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmfJLvwUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjdOJA//fzd+C5opZTwVOSwai4KfqtQRQc9e V/e+9jk5yoH885X3nPUsuwSY4nk8/4nsfvddJCe/uaWRFGhxIX4M5I5BwPPJu9zo REZ+yPCz9R/wJVgmS7Ifz0CmHb+kte2rRQMpOFYDITsXB0o5OXG2csYyLPVe/PU2 Zpz6YxmOhBccG8y2NkFnyeWNvuXm1athfWscXzj/z018zNaLTb/XbsvuavV9VbLm q3Srnk7g9fx6g8Wenkjk14tVJfskhV7+sGwPxMRp6h90QmMI+5azpXKO0Lh6P7z3 2ckvnBFjIJw5jyJlIa6FNQzpSwmdBVg3xUHLBuvXR1mN2SZALGwU6f+LYMUtx1GI tRGgxIAq6eLR09yHz0Cvn2eHAfnRfNzmhcn0eADqIwVfhNqSuuzasu/x4097wJQC 7z0UTwxVGZXNJeVwJigbfu9/KZwr3Sd3ttJQaLoka+RFtEEyemaQRw8W8HBxNuS0 8ec77w7i05ddEYaMwvllsJfVLKazN8Qm22Uk0D3n2BEvkjOFtd/84sZoRh61Fd5K aKutH3SzaNGCHfKhkoKD5dkPgT9hEPH1020SJrqLpO4UsXGPDrtaP0Ow4xogJAgV zJKEDl2lMB619lLFDJxnkHNCgbW3SELCl1mKEQSLfqa8bc5P4MLBojj08cEO55jb azsBgkylZL2Wrn0= =V9vx -----END PGP SIGNATURE-----