-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Jun 2025 15:08:42 -0400 Source: chromium Binary: chromium-l10n Architecture: all Version: 137.0.7151.103-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (137.0.7151.103-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2025-5958: Use after free in Media. Reported by Huang Xilin of Ant Group Light-Year Security Lab. - CVE-2025-5959: Type Confusion in V8. Reported by Seunghyun Lee as part of TyphoonPWN 2025. * Add build-dep on libc++-19-dev and switch to building statically against clang's libc++ (instead of gcc's libstdc++). * d/patches: - fixes/absl-optional.patch: drop, only needed for libstdc++. - fixes/font-gc-asan.patch: drop, only needed for libstdc++. - fixes/stdatomic.patch: drop, only needed for libstdc++. - fixes/make-pair.patch: drop, only needed for libstdc++. - bookworm/constflatset.patch: drop, only needed for libstdc++. - bookworm/constexpr2.patch: drop, only needed for libstdc++. - bookworm/constexpr3.patch: drop, only needed for libstdc++. - bookworm/foreach.patch: add patch from bookworm branch to fix clang-19 build failure. Checksums-Sha1: 3c1e12d29597b49ba67fda8c7a6713ed894a6444 8271596 chromium-l10n_137.0.7151.103-1~deb12u1_all.deb 8e73936316d542542d287d7b3ec640fcc69a56d8 26741 chromium_137.0.7151.103-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 9e8a8d5491c65763370d45741bc8c6ba24eb69e7c3db0d25d6bc0a47985bdd28 8271596 chromium-l10n_137.0.7151.103-1~deb12u1_all.deb d5b482ad911b69a02a3f6b69b2dea6e11788ad3b8a0a56435ef7d81eba19193e 26741 chromium_137.0.7151.103-1~deb12u1_all-buildd.buildinfo Files: d51294bd8134b09bb7654b37fd2f984f 8271596 localization optional chromium-l10n_137.0.7151.103-1~deb12u1_all.deb 9060026f26e7db7a3b7e0c9bd016d557 26741 web optional chromium_137.0.7151.103-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmhKIQYACgkQJm69HxMT N+o3QxAAhx1C5B5hN1N+mh6sl7hB1SXXKczYtz3eyGoCI/kAqmXT5dFQjwgDzP3l pv3RPSadrxc85fSGbJ2lSSgSwNG2aQWEUpEL5T953QJSwfYs2d+DE1QbHWW+S0EP camXFXC9EgPZUBQKmlMf9g8V0tyqRIbv8FJ+MUK1+dEC+DShnziUrqTn4DDNTiDs R2tAbOJVrcZzdJeEyDH9tUzlhQbzsM+Q950BsH0TSpni2oZb/KjvwEq1hN1nwjYZ LtHir/xWQezF5FUzJb6dOSEdwvSeDpQx2REEUEqgf9sfdaYb41wiCL3ErDPS6VB3 OEWsZSjmPpWW7CrX8cLaHZCBJf2ft4bb00IUJ/DN/WGiC5NbjDwGz/N6F+CRLFET Wx6mgB1mqiFwBBls+gRukEqDbZ/UrqhYbxWjbehee+fnhgTlydddD25w4ZcTmBFr hY+hUlBYA7/QrHE2Za3SmdjID8Iq+aQayr8XBfMQVdSBWYlbgoTrHNk+N9N8W9W1 nGt7M8eh8ooGq9VckDUJ4WkPf9PrAsXH/mlk0pNI+irkCTqtg53SwrfDwhmly2UD xOcpK9GtaHiOtQW6fDy4nEBWAREfxbJ0/++bvd/bBqX4lSdiF/jR7HhpQfwuetq1 VtN/rmCYTWcRdx3FgpyQauAx6iYrWDhCf79jecBTNYFWaejgsww= =hawQ -----END PGP SIGNATURE-----