-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 28 Mar 2024 16:58:00 -0500
Source: chromium
Binary: chromium
Architecture: source
Version: 123.0.6312.86-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Timothy Pearson <tpearson@debian.org>
Closes: 1067886
Changes:
chromium (123.0.6312.86-1) unstable; urgency=high
.
* New upstream stable release.
- CVE-2024-2883: Use after free in ANGLE.
Reported by Cassidy Kim(@cassidy6564).
- CVE-2024-2885: Use after free in Dawn. Reported by wgslfuzz.
- CVE-2024-2886: Use after free in WebCodecs. Reported by
Seunghyun Lee (@0x10n) of KAIST Hacking Lab, via Pwn2Own 2024.
- CVE-2024-2887: Type Confusion in WebAssembly.
Reported by Manfred Paul, via Pwn2Own 2024.
* d/patches/ppc64le:
- fixes/fix-clang-selection.patch: select clang on ppc64 platforms
- ppc64le/third_party/0001-Add-PPC64-support-for-boringssl.patch: fix
ARM builds.
.
[ Andres Salomon ]
* d/patches:
- fixes/bad-font-gc1.patch, fixes/bad-font-gc2.patch: revert a pair of
upstream commits that result in blink's garbage collector frequently
deadlocking and crashing (closes: #1067886).
Checksums-Sha1:
b116af187590872a6b3ac42d8a17d821124b2d98 3690 chromium_123.0.6312.86-1.dsc
9f26e9673c8089e234536ef98322c9addbba18f1 835993120 chromium_123.0.6312.86.orig.tar.xz
9532748664b1ab23aea83e2d594423b599ae3e29 407328 chromium_123.0.6312.86-1.debian.tar.xz
c631cf7cdd5ed85a3eed00c6281f93279b78f5c0 22342 chromium_123.0.6312.86-1_source.buildinfo
Checksums-Sha256:
1d1f9e80784c021d6e06b5ffcffe851fb47ba94f9c2a917230b18140a1127efd 3690 chromium_123.0.6312.86-1.dsc
3409f6dd160e5e1086a844e7193255f5587dbcf553adf2b71ac53fe7ff76a11b 835993120 chromium_123.0.6312.86.orig.tar.xz
473a7cb6e7175a9103bcca31852acb4819bbb5c573a9fe7865b2f9dfecb7184f 407328 chromium_123.0.6312.86-1.debian.tar.xz
9cf0eace33e0e624381b1f508fcfcff41cd4b45b15135bfde62176a0a50f3d1f 22342 chromium_123.0.6312.86-1_source.buildinfo
Files:
c3cd242854694cd90ec2a89e09d492a2 3690 web optional chromium_123.0.6312.86-1.dsc
612349854138f819425af3d05084f2ac 835993120 web optional chromium_123.0.6312.86.orig.tar.xz
25e6090e6c172ce729c6603eb7c8416e 407328 web optional chromium_123.0.6312.86-1.debian.tar.xz
380cc074a742f1595c6a1b123eacf34a 22342 web optional chromium_123.0.6312.86-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=C7dK
-----END PGP SIGNATURE-----
Attachment:
pgp72Zj6djc26.pgp
Description: PGP signature