-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 03 Dec 2025 01:54:50 -0500
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 143.0.7499.40-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (143.0.7499.40-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream stable release.
     - CVE-2025-13630: Type Confusion in V8.
       Reported by Shreyas Penkar (@streypaws).
     - CVE-2025-13631: Inappropriate implementation in Google Updater.
       Reported by Jota Domingos.
     - CVE-2025-13632: Inappropriate implementation in DevTools.
       Reported by Leandro Teles.
     - CVE-2025-13633: Use after free in Digital Credentials.
       Reported by Chrome.
     - CVE-2025-13634: Inappropriate implementation in Downloads.
       Reported by Eric Lawrence of Microsoft.
     - CVE-2025-13720: Bad cast in Loader. Reported by Chrome.
     - CVE-2025-13721: Race in v8. Reported by Chrome.
     - CVE-2025-13635: Inappropriate implementation in Downloads.
       Reported by Hafiizh.
     - CVE-2025-13636: Inappropriate implementation in Split View.
       Reported by Khalil Zhani.
     - CVE-2025-13637: Inappropriate implementation in Downloads.
       Reported by Hafiizh.
     - CVE-2025-13638: Use after free in Media Stream. Reported by sherkito.
     - CVE-2025-13639: Inappropriate implementation in WebRTC.
       Reported by Philipp Hancke.
     - CVE-2025-13640: Inappropriate implementation in Passwords.
       Reported by Anonymous.
   * d/patches:
     - fixes/headless-gn.patch: refresh.
     - fixes/chromium-142-iwyu-field-form-data.patch: drop, merged upstream.
     - disable/tests.patch: refresh.
     - ungoogled/disable-privacy-sandbox.patch: sync from upstream.
     - fixes/libpng-testonly.patch: add a workaround for a missing build target
       that upstream forgot to include.
     - trixie/rust-no-alloc-shim.patch: mark nightly feature 'no_mangle' as
       unsafe to make rustc happy.
     - trixie/cookie-string-view.patch: add a workaround for missing clang-19
       feature.
 .
   [ Daniel Richard G. ]
   * d/patches:
     - debianization/cross-build.patch: Avoid "Assignment had no effect"
       error from GN when running outside of d/rules.
     - debianization/rustc-bootstrap.patch: Move RUSTC_BOOTSTRAP=1 here.
     - disable/license-headless-shell.patch: Don't generate the (unused)
       LICENSE.headless_shell file, as the rule tends to break easily.
     - fixes/headless-gn.patch: No longer needed, thanks to previous patch.
     - trixie/rust-is-multiple-of.patch: add more workarounds for missing
       rustc features.
   * d/rules: Move RUSTC_BOOTSTRAP=1 environment setting into patch.
 .
   [ Timothy Pearson ]
   * d/patches/ppc64le:
     - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from
       upstream sources
     - ppc64le/fixes/fix-clang-selection.patch: Refresh for upstream changes
 .
   [ Jianfeng Liu ]
   * Add loong64 support, with patches in d/patches/loongarch64/.
Checksums-Sha1:
 7ea7198c6b16b2c07cbff4dfc0580063503ed0be 8519924 chromium-l10n_143.0.7499.40-1~deb13u1_all.deb
 d196a33c07a0f70ceaca0d8a1a15b5befe8bb591 26636 chromium_143.0.7499.40-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 a7cf429c181d1dc2060d5fec10854ae1d07888f71492362ebc9314924f49297f 8519924 chromium-l10n_143.0.7499.40-1~deb13u1_all.deb
 6125102fc94deaa4f9b8efc8e9dee44d7819ef84e9be12b82a427026264601ab 26636 chromium_143.0.7499.40-1~deb13u1_all-buildd.buildinfo
Files:
 fded8e068595d2b8e0cecc8d614093d2 8519924 localization optional chromium-l10n_143.0.7499.40-1~deb13u1_all.deb
 78a3e9e510695a88b4ce0f34d5fd587b 26636 web optional chromium_143.0.7499.40-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=K9H2
-----END PGP SIGNATURE-----