-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Jun 2025 15:08:42 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 137.0.7151.103-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (137.0.7151.103-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2025-5958: Use after free in Media. Reported by Huang Xilin of Ant Group Light-Year Security Lab. - CVE-2025-5959: Type Confusion in V8. Reported by Seunghyun Lee as part of TyphoonPWN 2025. * Add build-dep on libc++-19-dev and switch to building statically against clang's libc++ (instead of gcc's libstdc++). * d/patches: - fixes/absl-optional.patch: drop, only needed for libstdc++. - fixes/font-gc-asan.patch: drop, only needed for libstdc++. - fixes/stdatomic.patch: drop, only needed for libstdc++. - fixes/make-pair.patch: drop, only needed for libstdc++. - bookworm/constflatset.patch: drop, only needed for libstdc++. - bookworm/constexpr2.patch: drop, only needed for libstdc++. - bookworm/constexpr3.patch: drop, only needed for libstdc++. - bookworm/foreach.patch: add patch from bookworm branch to fix clang-19 build failure. Checksums-Sha1: 19137784fe60bf95d16a35f9edcb1e4d9bbed781 5531772 chromium-common-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 6d816950b5a3bfdd48638105d8dd7933735218fb 28066340 chromium-common_137.0.7151.103-1~deb12u1_ppc64el.deb ae137aac6aa88bc1a3d212065f7ca5bc5e175f93 28082032 chromium-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 1ce197a923b0d3238acc1a7b59a241d6db64a59d 7614864 chromium-driver_137.0.7151.103-1~deb12u1_ppc64el.deb 82bce9c85c11f2cf81ada9eea361315664911018 23480392 chromium-headless-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 8550e8eeda3630dbb48816a6f60a14704289d3c4 56179160 chromium-headless-shell_137.0.7151.103-1~deb12u1_ppc64el.deb 95e351e5bc1937121c371bb52d5ff0c9c9722af3 19040 chromium-sandbox-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb a54c5531060875c4bcaf1315a170c1aadccc548f 104600 chromium-sandbox_137.0.7151.103-1~deb12u1_ppc64el.deb 5847e26354d298f66d17e963bd236298c2d849f0 22715068 chromium-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 474598deff099b6872c2a1763e40e36f48284680 52881060 chromium-shell_137.0.7151.103-1~deb12u1_ppc64el.deb 81bb07a56d162441d55d5308d16213f80b437c70 30162 chromium_137.0.7151.103-1~deb12u1_ppc64el-buildd.buildinfo 79d84e5eadca18ed188770188638c75135d477cb 74808380 chromium_137.0.7151.103-1~deb12u1_ppc64el.deb Checksums-Sha256: 61d77f706190e003c5cc9c145b0c9809cc3cd2bea840f915b6f6a947f8eb01e4 5531772 chromium-common-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 5b9fd267413b1f767422a4702a0d9a5fa1884b1ee67e575bf1e47666a945fdae 28066340 chromium-common_137.0.7151.103-1~deb12u1_ppc64el.deb c8ad948f124b5e7189d65eae2759d6e1f98f3177aa996c98558efb65be347a7f 28082032 chromium-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 92b63efd7984f6a76e73fefaff893ac996b73f90bcebc59a38da6ad47a391fe0 7614864 chromium-driver_137.0.7151.103-1~deb12u1_ppc64el.deb f59336160329899a87d58abc47deab4a187352b55945338eb7c6526e2e374dd2 23480392 chromium-headless-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb bab33dc40db4ad83a8169353576ed6b8072761c240bfd127c3df347a00472d1f 56179160 chromium-headless-shell_137.0.7151.103-1~deb12u1_ppc64el.deb c9c45e1544f7a8e4775dc0dc87a23c371eb51b0b3d11bdef53675da6836081c0 19040 chromium-sandbox-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb cb7978e1943076e123f0b7b57fdc2059a4d26ffabd556788293ea796f65eabd7 104600 chromium-sandbox_137.0.7151.103-1~deb12u1_ppc64el.deb 3d17161a093d2ac7133e3089e9f8b632d0f28d1e0f43a7b808319c2001ebfce3 22715068 chromium-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 9bb8c3eda9a8b58ff4dbea9105b8ccec2fb9dd982280515aea076566776352c5 52881060 chromium-shell_137.0.7151.103-1~deb12u1_ppc64el.deb 6ac0f490db52b5bd5b0dfe8242daf0adf71e99c1dad3b4bfaacd5bdc4acf96b8 30162 chromium_137.0.7151.103-1~deb12u1_ppc64el-buildd.buildinfo c5604e4608caa9e452e89295d1efaafd80ff1e01a22810c1968ed88185da1a45 74808380 chromium_137.0.7151.103-1~deb12u1_ppc64el.deb Files: 5d45cbb0aba6b9bf57d17ba317c63803 5531772 debug optional chromium-common-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb b8cf0d1db9d9adfefcf8ab5b907fa3ca 28066340 web optional chromium-common_137.0.7151.103-1~deb12u1_ppc64el.deb 661186e75c1e859458752cd9ddf90f22 28082032 debug optional chromium-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb a0e801c5574e4e615bfa22116d3b790a 7614864 web optional chromium-driver_137.0.7151.103-1~deb12u1_ppc64el.deb 6250cfb5cc873e69ff30698b618d5d54 23480392 debug optional chromium-headless-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb dba87baf07f364dd856005e7ad696ebd 56179160 web optional chromium-headless-shell_137.0.7151.103-1~deb12u1_ppc64el.deb 6bcc82484a756cf4ccfdda65f328209d 19040 debug optional chromium-sandbox-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb 838542f7445919fbffad542890b53b89 104600 web optional chromium-sandbox_137.0.7151.103-1~deb12u1_ppc64el.deb d8e7a07359d4eafd68659037f3817bd0 22715068 debug optional chromium-shell-dbgsym_137.0.7151.103-1~deb12u1_ppc64el.deb d41822c4ab322598a7a11e55c12b6d68 52881060 web optional chromium-shell_137.0.7151.103-1~deb12u1_ppc64el.deb 2de6e23bd2e18bf30a5a1728328384c5 30162 web optional chromium_137.0.7151.103-1~deb12u1_ppc64el-buildd.buildinfo c5c88ec2ed4a560e4aa46ae9563a1c50 74808380 web optional chromium_137.0.7151.103-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZAv/jpGRqS40qyb11oy1TpxF0ZAFAmhKS60ACgkQ1oy1TpxF 0ZADeA/9EZ7OozFI48MgvC8GFABdmn9LQaHH4XXnA7fJCkkq9FM5QczxHdkBsEa0 PV2pmcieFDb1kANw/XMQmwtv6Tq1T482goCEsy64zE/lcozmVmwcUFcXAH0NBpuP +Mabi3+BsCRBNep4DvcUnkZVfbMtMAOWf95Zv+xFZTXEQGxgV8iAcelTQpVYPHm3 b0eVWFwiFRI+4vvKnooI6G0GybNWHZMjjsk2VnOEPh5ALv3dj+/KHrm6YXKxzKYq sqJBg4hGHQv1ix482lcg1985mkUbsnMsBSklvZ4uYoAPWa4EU0ficUU+90ZEzeNt ixnau3cMTayqDLNKUWrgsnzFye5rAnYLAjlEuGeeuAwIrx2Z6ZfEull2e4TQ8Ll7 FL1p2cSVvVVWyO2TpYCT9yVmAIiEaYuQv57jGAOT1y7DYVjHa2sz1shdCBddba9s QkoPccTMmMuBEbgVv+R3y65x3JYVNBL7nRw3aW5hLPnStG4kI0lKuHtHs+Ftc43W 5g09wXV6ew+xHwZBhOBozYTEJ62yawUvQo7rcAC/TpsSr44H98HLlrJ7+gDEweDK VM94/eBLeNyl2K0PpMcEqWPdvn3xjMQO/5r2mWXUidEh4lB9/QTxfQ4gFN8EC/YP aNgESPy5EYKC21n2Ryte4W66oIZoG06nyLHwunF08IJk3gyFIaM= =DNXc -----END PGP SIGNATURE-----