-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 10 Apr 2024 21:21:05 -0400
Source: chromium
Architecture: source
Version: 123.0.6312.122-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (123.0.6312.122-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2024-3157: Out of bounds write in Compositing.
Reported by DarkNavy.
- CVE-2024-3516: Heap buffer overflow in ANGLE.
Reported by Bao (zx) Pham and Toan (suto) Pham of Qrious Secure.
- CVE-2024-3515: Use after free in Dawn. Reported by wgslfuzz.
Checksums-Sha1:
d4546049e6ab28a3d164d40f479a9ed0cc5dcdea 3726 chromium_123.0.6312.122-1.dsc
1f6fd5536698bea14b6d5749f11a385123ae046c 836565308 chromium_123.0.6312.122.orig.tar.xz
10620b9492bf92f53c3a62ff358ba1acad6e8263 407588 chromium_123.0.6312.122-1.debian.tar.xz
148047a208f9ea5bd92dc163d812efe6dee94ea7 21892 chromium_123.0.6312.122-1_source.buildinfo
Checksums-Sha256:
13dcafb1274e3b82c407f3361b37a43aef49b4e07727e190e4d263e9e76c67d2 3726 chromium_123.0.6312.122-1.dsc
fb7b2fb79c74b2dff59ac996f59039c9c52bd048dbcf1678471d271e7b02d87d 836565308 chromium_123.0.6312.122.orig.tar.xz
76cb0527af650699dbf83868095a99ba637a5180a9368d72f4e40159762e1858 407588 chromium_123.0.6312.122-1.debian.tar.xz
a2052495039787110591aaca0c5456c9360df152247c30d103c4d19b51cfee8c 21892 chromium_123.0.6312.122-1_source.buildinfo
Files:
901b5c1ff29c572f5a33b020688176ca 3726 web optional chromium_123.0.6312.122-1.dsc
35be7ca6b97155d3fe8bbb15ecfca767 836565308 web optional chromium_123.0.6312.122.orig.tar.xz
2b8f50b5cd50f36f467dd8da5795a3f9 407588 web optional chromium_123.0.6312.122-1.debian.tar.xz
85aea9a4fa37e6e360f5b4893578ce88 21892 web optional chromium_123.0.6312.122-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=KtEK
-----END PGP SIGNATURE-----
Attachment:
pgpeDZ77s9UOE.pgp
Description: PGP signature