-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 06 May 2025 14:13:50 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 136.0.7103.92-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (136.0.7103.92-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2025-4372: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab. . [ Daniel Richard G. ] * d/patches/fixes/armhf-no-thumb.patch: Fix armhf FTBFS due to use of a Rust target (thumbv7neon) that Debian does not ship. Checksums-Sha1: dc841629d90c807f17a3182fd0f6b850f04ce05c 4840188 chromium-common-dbgsym_136.0.7103.92-1~deb12u1_i386.deb b4c249ae2769d1eb953b93bbae24a91fa744bd60 21292740 chromium-common_136.0.7103.92-1~deb12u1_i386.deb 9733d580239c85df7ff3e0ffc6ffc4a650f71146 32768464 chromium-dbgsym_136.0.7103.92-1~deb12u1_i386.deb cb9458b7ae94ac41565b24fbd2702335f4fd7df5 7966284 chromium-driver_136.0.7103.92-1~deb12u1_i386.deb 0a8b7a4d1b5548890fbd57fb99b1f1652b11f7f5 27338956 chromium-headless-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 4d3761daab043345511e6bd2c24956a768580b3f 54295608 chromium-headless-shell_136.0.7103.92-1~deb12u1_i386.deb c9ea6a3a63c8d47353aa5ec80c42b19a14af907e 14120 chromium-sandbox-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 58f8370b62476037687ab0c1c539d556b5fafc9b 102904 chromium-sandbox_136.0.7103.92-1~deb12u1_i386.deb 451da2a7f40981428673be7fb7cd777c4be59761 27737520 chromium-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 7078e47a4b24ec8e3f39084d72331ecd20bb5107 56221804 chromium-shell_136.0.7103.92-1~deb12u1_i386.deb a700c8713e5a1cd8adf761c8d1375150e6df2dfc 30071 chromium_136.0.7103.92-1~deb12u1_i386-buildd.buildinfo 793d50eaed844c1f78e0c7a9feb7824a6ada3b2f 70764768 chromium_136.0.7103.92-1~deb12u1_i386.deb Checksums-Sha256: c10c9c01660d5c1d5538605e5b161ef1890be2c6b1bee54ac9c8229456323b65 4840188 chromium-common-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 39b2dce7d26d905ef893e57a6dffaab4cc8244bb45a72b8fcc6187a135adb6cd 21292740 chromium-common_136.0.7103.92-1~deb12u1_i386.deb 2d57c56dd300280a3f1703617353793ce5146acafc80b89b0fd41465ffef05de 32768464 chromium-dbgsym_136.0.7103.92-1~deb12u1_i386.deb ce86ef23cea88c8a0c2629d8a6829d381044e387e04b3fde563bd0cbde7cfc73 7966284 chromium-driver_136.0.7103.92-1~deb12u1_i386.deb 7964696722ee99426b122b03590cc3a18f7eb77631a2faae9f9b0826c8eddbcc 27338956 chromium-headless-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 4358164fb1b0cc8a64ce186a55eeacadb4cb0f1e7b590e7fbce694016e827a8c 54295608 chromium-headless-shell_136.0.7103.92-1~deb12u1_i386.deb cfe0230ec0779a5337c83ab3fb4f74cf59a4a219ae3111f5d38eb916388b5d70 14120 chromium-sandbox-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 649ba1e1ddb2a0c4394abde9cdef1d45aa2adc5c60211e2e176fc0c4d2a4dab8 102904 chromium-sandbox_136.0.7103.92-1~deb12u1_i386.deb d74fb3b8cead510821180a15d52566dda27c41031f318b473afcd658994a4ca2 27737520 chromium-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 74d917b817049de5bf65e964cfff90408710918d1e577da4a1091129901496af 56221804 chromium-shell_136.0.7103.92-1~deb12u1_i386.deb 4f392d77cd78e5eac5a4218e101caf96ce500ab26c05806b5f93c82e2180bf5d 30071 chromium_136.0.7103.92-1~deb12u1_i386-buildd.buildinfo 8dfcfa6a0d42a957a5eb2d5c8e9ecc3e2c94eacd4f6c4fe3c62389372be9cfb1 70764768 chromium_136.0.7103.92-1~deb12u1_i386.deb Files: a0dbf3ab59e32bdb16dce459860ba64e 4840188 debug optional chromium-common-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 15713f493b0c931bed273913580c4972 21292740 web optional chromium-common_136.0.7103.92-1~deb12u1_i386.deb 21042961c34ee241d3df2fedbd85eeff 32768464 debug optional chromium-dbgsym_136.0.7103.92-1~deb12u1_i386.deb bebe1bbe385f91fdfa5c6cbe2aae1057 7966284 web optional chromium-driver_136.0.7103.92-1~deb12u1_i386.deb 572110bccc178b4541eedd90e9dd67c9 27338956 debug optional chromium-headless-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb e1ab65b56e33e09399afc27cbacc1b92 54295608 web optional chromium-headless-shell_136.0.7103.92-1~deb12u1_i386.deb d6594381a210c078da66bf4b99a72cb8 14120 debug optional chromium-sandbox-dbgsym_136.0.7103.92-1~deb12u1_i386.deb fc054ecda4a8f1c75c83eb810d67d486 102904 web optional chromium-sandbox_136.0.7103.92-1~deb12u1_i386.deb dd7e5d3e332f58299065cfc379c7748d 27737520 debug optional chromium-shell-dbgsym_136.0.7103.92-1~deb12u1_i386.deb 048a338669c337e11733c2c6822ce836 56221804 web optional chromium-shell_136.0.7103.92-1~deb12u1_i386.deb 82a32a07d3e4b74d87bd8c99e37264d0 30071 web optional chromium_136.0.7103.92-1~deb12u1_i386-buildd.buildinfo 6f60a406cfd6421218de0c4bde6661ef 70764768 web optional chromium_136.0.7103.92-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmgbqKsACgkQfUw6/tXb AmMAzA//alRGbgR84a2YLRAI1pTSkSVIXwDoOAWkzjcVaacNkq8xTHeTHj5hAv/d Lq+SdSRYbaM8l9YuFV5pjTuXMWf3zi6sOaPs9+IOgQzQtDCxuS/ouU9+Spvc8cat B2trqPbCEVdAQQ1UmG6lotNUp3y/HBDiKTNLuRr10qHi8Se0Pgi9E9yEZkyLog9a RLVlBFPDPpy1Y6ai2QWNfEuTD1SgHuaE93r2JtyZbkPnEs5wO5x+Q6Sw+9pqrHA9 0KKY6caqhqmg0OSlRyk1PF5YPWBiFAANELpTb6K+LrKjE4g9tNsLHkBesX72Hhha r38909W/9QyVAvcma6Q+LUhrcjFSvBYhoi/TqEat8zXn0HThb5h057DQJZ6khT/d Dc6kvDRmnt1K6ql6RAWjSzdmQbLJ3+ovAnslR1JSCn7f/2sO8u1cDRD2GggvZZoO ui5QGlZPF1W+mvBQD7l63UeoVihNUQR4zuRZ+BIcJ9BFqLb4SDe5nqcsYpHs9ssk X8LyWaBwAw+OQMSGHwZPuohaIcSG+71gwf9+QnHwV5MJeUlQ1dXDj+fexXrkLEeY AkJ77d0RgA2mdkiG8BRdg0lhi4UzfAOmK+Uj1UVFoYTzkJaFmzmDCi8Ic1Npva4+ rnRkRPEH529pQUD8QvcS2XQteVa9W+48Cy+z/3AG+71Y5NqNiTQ= =cl6M -----END PGP SIGNATURE-----