-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 10 Jun 2025 15:08:42 -0400
Source: chromium
Architecture: source
Version: 137.0.7151.103-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (137.0.7151.103-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2025-5958: Use after free in Media.
Reported by Huang Xilin of Ant Group Light-Year Security Lab.
- CVE-2025-5959: Type Confusion in V8.
Reported by Seunghyun Lee as part of TyphoonPWN 2025.
* Add build-dep on libc++-19-dev and switch to building statically
against clang's libc++ (instead of gcc's libstdc++).
* d/patches:
- fixes/absl-optional.patch: drop, only needed for libstdc++.
- fixes/font-gc-asan.patch: drop, only needed for libstdc++.
- fixes/stdatomic.patch: drop, only needed for libstdc++.
- fixes/make-pair.patch: drop, only needed for libstdc++.
- bookworm/constflatset.patch: drop, only needed for libstdc++.
- bookworm/constexpr3.patch: drop, only needed for libstdc++.
- bookworm/foreach.patch: add patch from bookworm branch to fix
clang-19 build failure.
Checksums-Sha1:
edfb207c066148c0cf3207091d5f6adcb2f6709e 3951 chromium_137.0.7151.103-1.dsc
be259914ba138809b594f75f6c3c666f9bb8796f 945589756 chromium_137.0.7151.103.orig.tar.xz
9bb396af0327c3c4264d2af95b85ef198ecfe1f9 401448 chromium_137.0.7151.103-1.debian.tar.xz
789b14f5d1f8ae4e8a80780cd50ed6a3d32bbac7 26459 chromium_137.0.7151.103-1_source.buildinfo
Checksums-Sha256:
caeec410034a2fc2677155a951d3ad21c9354cda56c91710e872b255169cedc4 3951 chromium_137.0.7151.103-1.dsc
a2818b540c51258182be5e84b1bf88f518ff69c0339ae14003ec2bebe1c38545 945589756 chromium_137.0.7151.103.orig.tar.xz
1d2ca472e2da410eca04da86126969f300f82c22918d789b6e6b24c55542d45d 401448 chromium_137.0.7151.103-1.debian.tar.xz
a5f1be9c17944ca88297f2374ea24e4421a676ffda2f749f27008183d29ad6c9 26459 chromium_137.0.7151.103-1_source.buildinfo
Files:
e923d798f39d1a2dc432f170b00ce916 3951 web optional chromium_137.0.7151.103-1.dsc
2d993b8f4f4197f2891079fc66228c54 945589756 web optional chromium_137.0.7151.103.orig.tar.xz
51b09020c5c61ff9fc69e48a33bd0d90 401448 web optional chromium_137.0.7151.103-1.debian.tar.xz
9b6a69036b6e41e50cf8a4945913c4a8 26459 web optional chromium_137.0.7151.103-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmhJLHQUHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8NudjeDNA/+PNFsBy5n2dJGga54ab7VBWSVN/0a
zWLMZwFkI7rKBZ2BTxLWVk7e7UkPcBc76Y0p9itQmN4Dvs0BEEU8VlDFYPe2l4BC
2sLp9NkkmpEmo1xOu6T3XYLMeNFMf3pBgfZTt59RGRCJofW0Flpw+iiCpl3WzYKS
HoDC81AIsk9d3VfwgyYVf2+sZigPvyRg/Q7YrOBDiK5TpS4VXXZQIPQbK3iPzMCn
50qRcgk3axjpDfpMwSZFOmwMOsAtkJYiK8OAP9QPYEcKRLBXZ96kKrUd1XyFnYN2
i3wi0uBU82S7kL+7ZgLIK5lLVsUSqThYzcFxhPtItLAzlxW54TMFm5gmu9vktl5L
sDFG1GoFJZJape7oapjgOa3bC8vALI7XAX9UVCfG2en0135stseiVa4bkEo7G+/X
ivFXUeV4eFFoWeM8uotFz8aQy+bG59a36Z4kwC365bJWeEsQPwIZo82pxlSJiy7O
n41AWx05UqK1IGEAtJ1mz98ZS3Hw0FaHL2Fxxtc0RzL7lHKEBN4yk4Z1EFLhvH+b
rwKoplaR4opeg8AWySVKIFbovbs59ZmMDSNQmHJBopj5CAifnqh8neauUF/6S/GH
lhFq95OPA7eLR8WulNL8LDB/mXrWyGJXa4wTn7g5enCIePQw8OOa9SQkflJ98B6s
MjHWc7+yBgMMzPs=
=DhZi
-----END PGP SIGNATURE-----
