-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Apr 2025 02:04:23 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 135.0.7049.52-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (135.0.7049.52-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream stable release.
     - CVE-2025-3066: Use after free in Navigations.
       Reported by Sven Dysthe (@svn-dys).
     - CVE-2025-3067: Inappropriate implementation in Custom Tabs.
       Reported by Philipp Beer (TU Wien).
     - CVE-2025-3068: Inappropriate implementation in Intents.
       Reported by Simon Rawet.
     - CVE-2025-3069: Inappropriate implementation in Extensions.
       Reported by NDevTK.
     - CVE-2025-3070: Insufficient validation of untrusted input in
       Extensions.
     - CVE-2025-3071: Inappropriate implementation in Navigations.
       Reported by David Erceg.
     - CVE-2025-3072: Inappropriate implementation in Custom Tabs.
       Reported by Om Apip.
     - CVE-2025-3073: Inappropriate implementation in Autofill.
       Reported by Hafiizh.
     - CVE-2025-3074: Inappropriate implementation in Downloads.
       Reported by Farras Givari.
   * d/patches:
     - upstream/optional.patch: drop, merged upstream.
     - upstream/qualifications.patch: drop, merged upstream.
     - fixes/lens-optional.patch: drop, merged upstream.
     - fixes/optional.patch: drop, merged upstream.
     - fixes/swiftshader-llvm.patch: drop, merged upstream.
     - fixes/variant.patch: drop, merged upstream.
     - bookworm/clang19.patch: refresh.
     - bookworm/gn-revert-path-exists.patch: add build fix to work around
       older gn.
     - ungoogled/disable-privacy-sandbox.patch: refresh from ungoogled.
     - fixes/make-pair.patch: add a gcc-specific build fix.
     - disable/buildtools-libc.patch: add patch to remove libc build stuff.
     - bookworm/gn-absl.patch: refresh.
     - bookworm/constexpr.patch: refresh.
     - bookworm/stdarch-arm.patch: refresh.
     - bookworm/eslint.patch: add bookworm-specific build fix; thanks
       Daniel Richard G. <skunk@iSKUNK.ORG>!
     - bookworm/crabbyav1f.patch: add rustc 1.78 build fix workaround.
 .
   [ Timothy Pearson ]
   * Enable pointer compression on ppc64le
     This fixes V8 OOM conditions noted on e.g. https://trac.ffmpeg.org
   * d/patches/ppc64le:
     - v8/0001-Enable-ppc64-pointer-compression.patch
     - sandbox/0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch:
       refresh for upstream changes
 .
   [ Daniel Richard G. ]
   * d/rules: Add switch to allow downloading either Google's upstream tarball,
     or an independently-created one from Gentoo. Default to the latter.
Checksums-Sha1:
 25b97977a89cfededc04ffe8f643f1d49cf73a58 8179976 chromium-l10n_135.0.7049.52-1~deb12u1_all.deb
 25a73ce3d9ea828508b866bed8951c1c0665591d 26679 chromium_135.0.7049.52-1~deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 57c816d0eccc58f053384592baf76b9530d8498ce19a3d0e87f34c58e6b9998c 8179976 chromium-l10n_135.0.7049.52-1~deb12u1_all.deb
 3a2a37ef14dfff8b36f0f4c4b8a484eb22335b2494df9277fc8114112d85a20d 26679 chromium_135.0.7049.52-1~deb12u1_all-buildd.buildinfo
Files:
 b2c5a0022aa119ba296328a9730ccdda 8179976 localization optional chromium-l10n_135.0.7049.52-1~deb12u1_all.deb
 63afc56bdef3706e293d4f1de7249df3 26679 web optional chromium_135.0.7049.52-1~deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmft8/IACgkQJm69HxMT
N+q0Lw//dG+KJMQzoAeIqJOQOq1Uy13uZWpR0S+QdQaTDQahrw+jI9N05GeVhkQa
PJo6ll7Xse8P53Ra2Hzumu54seEzE+UsxgiYsOU+mJI6PETDcgmgFDSikS7Ie2Df
hdaKvFCnRIkh4v2uS/wOwS9hsra165BQX1XAN0mralC0tVNaGI2bFRsZVQtBKrna
UGFVi8cckglv0XrmwBTmmkV7WXViCp6MHrUS0tFvkzZoBQfRsPfTz+M/aLIm7EOI
NGxMqPkmnISE+0EvAbjq+4up4whNOf6Dnytuo6evpQoykYhM+AmS5e+Pvx+ZaaHy
38L8phXaBfLtC28aRi7uZGfQxmc/3WNkDkb4SKT4lBYP5+tSpo4Z6m2jbaxS1HL6
Y/A/Eh43Uxo2OIvv3ruvJVPJQUa77Qxz/AL6f75qigXMwnTR7Lf0NLObSxCJx0wy
2ZHOZ9TfRTAmPA/32kp6UAw9WerMABqZfcFIhkmYQxZX50qng9josm9vouMBqzab
jBzIkSPRGxsFJ2NMnqWpkyTkkPMRKHDOJPk/d6CYMHmSuxSckg9U5sCxkCCcfRwP
JrUQAAyGCqWloXv36QrY9/fGM1rVeSSiYCZUx6rTkAVZ7V+MeltQyGMzzM/YnBSf
wZg5VZ7CIsBRABD4dh2xWaLFUXtEDqiqoG/wPB3X4M+Ww6GHwRM=
=oDk9
-----END PGP SIGNATURE-----