-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Sep 2025 16:47:14 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 140.0.7339.80-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (140.0.7339.80-1~deb12u1) bookworm-security; urgency=medium . * New upstream stable release. - CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team. - CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani. - CVE-2025-9866: Inappropriate implementation in Extensions. Reported by NDevTK. - CVE-2025-9867: Inappropriate implementation in Downloads. Reported by Farras Givari. * d/patches: - fixes/armhf-icf.patch: refresh. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - disable/widevine-cdm-cu.patch: refresh (and make it shorter). - bookworm/clang19.patch: refresh. - disable/android.patch: delete a new reference to chrome/android/. - disable/buildtools-libc.patch: drop due to upstream cleanups. - trixie/rust-no-alloc-shim.patch: add a build fix for older rustc. - bookworm/rust-visibility.patch: drop, not needed w/ new rust 1.85. - bookworm/crabbyav1f.patch: drop, not needed w/ new rust 1.85. - bookworm/toktrie-utf8chunks.patch: drop, not needed w/ new rust. - bookworm/derivre-create.patch: drop, not needed w/ new rust. - bookworm/rust-split-at-checked.patch: drop, not needed w/ new rust. - bookworm/crabbyav1f-macro-scope.patch: drop, not needed w/ new rust. - bookworm/rust-box-to-vec.patch: drop, not needed w/ new rust. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0002-regenerate-xnn-buildgn.patch: Refresh for upstream changes - fixes/fix-study-crash.patch: Refresh for upstream changes - core/add-ppc64-architecture-to-extensions.diff: Refresh for upstream changes - fixes/fix-unknown-warning-option-messages.diff: Refresh for upstream changes - libaom/0001-Add-pregenerated-config-for-libaom-on-ppc64.patch: Regenerate from new upstream version - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Regenerate from new upstream version Checksums-Sha1: 2076cae11489d8a61661d039492523c05eef5a6f 5897976 chromium-common-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb f76de841988b55e5c33b0da7025c523dc4546fa3 29269820 chromium-common_140.0.7339.80-1~deb12u1_ppc64el.deb cf2ad0624c3164f473155a37bfa961a2d7cc308f 29950600 chromium-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 688070bdaf960362af8b8b7b6a836a0ca456513b 7813856 chromium-driver_140.0.7339.80-1~deb12u1_ppc64el.deb d16ebdb247b484d9f78bfb03bce8649f0c3e0f92 23996364 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb f881cccd724bf95a645e91abef7c51b2f41b215c 53280644 chromium-headless-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 3d005a9da81e0364eac7439b4f121bbda86d3a5d 19372 chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb ed0c94247ff4c7bc4cd6bcec97843f413f5ac8d5 106616 chromium-sandbox_140.0.7339.80-1~deb12u1_ppc64el.deb 32223af7adef6f5c8d25d2fc8a581c9688b5938d 26015988 chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb c70abaaede2af83c189836f8d3fcf620265f8e96 58004260 chromium-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 4f27f804142b78b49ea2e54b79843c1496ebc8c5 30221 chromium_140.0.7339.80-1~deb12u1_ppc64el-buildd.buildinfo f713fb4f39acd4449901639cc339f02309a3bd35 69648772 chromium_140.0.7339.80-1~deb12u1_ppc64el.deb Checksums-Sha256: 0368e94adc5faaa891d86c6d874a11c30330feac8a89a1d8e292800a80804108 5897976 chromium-common-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 70e007ffa148f02320164e3da01d12626d6c830ba9ebcc18e3a0c42d25d0ab2a 29269820 chromium-common_140.0.7339.80-1~deb12u1_ppc64el.deb 53849a46a4bc557f26967b5ec5031477ebe9d1145455248b1c566bbc714c524d 29950600 chromium-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 4bcb717f0b1fee36fb6f41f558bc987843f7ac0a3638e76f253a82c58b1022de 7813856 chromium-driver_140.0.7339.80-1~deb12u1_ppc64el.deb 8cafd704b8d244617a941f2225da33d37078f0dbb1b91c676165886ba04a81e5 23996364 chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 37a8bbe0797545e8007472955614c3a267e9d77bc71664bcdde8b587e7865a7f 53280644 chromium-headless-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 42bb7ab3598f65f1f5122581cd23c41d553675f8fd64c3c0300773816ef25a42 19372 chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 00588fa3c5cf35567df1ff8073c0273561ae580bcd2c6fc4375a3cf9fd94778a 106616 chromium-sandbox_140.0.7339.80-1~deb12u1_ppc64el.deb 7fc9b61873ee71dd5a56f8f5cabdb0f06b6c942008732e84d03e006743eb75b5 26015988 chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 1acefb5634f8668e07302a0269291da43e7f27d81fa34b45c98aae4912c3eb29 58004260 chromium-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 33b3444216dae858b3991dcb6e4fa78030151131222947bdf6ec788b30136c78 30221 chromium_140.0.7339.80-1~deb12u1_ppc64el-buildd.buildinfo d6a6984934d51f3a14a6c186ca78b9e50801715ff37459fb669341c965c2c2d4 69648772 chromium_140.0.7339.80-1~deb12u1_ppc64el.deb Files: 414d79b0caca2b55fca50b7794642009 5897976 debug optional chromium-common-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 24e8c5f597ef82e1449db3a5f29b6ab9 29269820 web optional chromium-common_140.0.7339.80-1~deb12u1_ppc64el.deb 291f71074325fba937acbd44892e7be3 29950600 debug optional chromium-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb e17bfc0516f9dab6280789ad5455793c 7813856 web optional chromium-driver_140.0.7339.80-1~deb12u1_ppc64el.deb c586043dc5c7a32f6bfc415122d3b0f0 23996364 debug optional chromium-headless-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 9ebd05667128d7ba9082fa5915c18806 53280644 web optional chromium-headless-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 59870d34237d427a3fe46be061fd285f 19372 debug optional chromium-sandbox-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 7841cb3e868b76e7177a98e1f7137883 106616 web optional chromium-sandbox_140.0.7339.80-1~deb12u1_ppc64el.deb 08dc4300ca6c1d27d310503ec4825595 26015988 debug optional chromium-shell-dbgsym_140.0.7339.80-1~deb12u1_ppc64el.deb 84bb6db5c3d5acf065441067e470cfbd 58004260 web optional chromium-shell_140.0.7339.80-1~deb12u1_ppc64el.deb 1194c309286c6b3e38e317955be8901a 30221 web optional chromium_140.0.7339.80-1~deb12u1_ppc64el-buildd.buildinfo fb9e53d10a8e61dbb1110a3bdd0e293d 69648772 web optional chromium_140.0.7339.80-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmi6+1sACgkQOrVShFbI MGF4YQ//b5gQbfedeL/rFdWAv0S5jKZT8YdBmzlvJWtVZyesaZu2IjKuSbIzqaAS 0Fj5FOaKeyUO2jwBODaW86pkVq/dKJR3HOAwuFOLJgvyFL+6o3DsoO9fFmqkc07X q3m8A8haoPIDW3tBSoo6AOot+xzddlp3letGGsLEf57yDFJSpg3k5lqdPFOZ6bDn m3JrUA004yVMDbcvnN55Ot/xmXn1HTNy0dPx36J+LiZTCFOgZMfgi7vu5VuSmynU Z0/uVZUCUNye8LIPFZNkFLUfa7VQfwi5Hfl54oVEUfRcbkNivRBqnyQEaH8wyCrA soJ71sWZIPoq7yuMMIkOg2uFMFNiPkYNu/YuVpaYnK6pEzGGkI1hs76SW4ARrACN j6lglFKkxkuLzw0xojq+a/elTsqs5zSeqIpKeOnumpZTtzZGDfzvBxDkU2Kz/Mo2 w5vEYLhAb9FxfrBHRD0ubVkynXa97yDG2bUWj5aGa9z1Qm8Dl72vQ/MGlsZ3eUfK RhIWz+LFMWzJELiqpUvAPf4UwkL47FUfE0AH28xXuntgIIkuPBD6dH0txYjuu086 n6jmzoYJti8jTtpgXuEGvu0+ki4S0jks9Y/RK4DZhMLnVZBQTForE60Im+fAHmbj D1fvDl1vE0Ax0LePR4baWLipuHU+Ma6BOgAWjnGVtbqejZoZAEs= =xR9f -----END PGP SIGNATURE-----