-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 07 May 2024 14:47:32 -0400 Source: chromium Architecture: source Version: 124.0.6367.155-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Closes: 1070283 Changes: chromium (124.0.6367.155-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-4558: Use after free in ANGLE. Reported by gelatin dessert. - CVE-2024-4559: Heap buffer overflow in WebAudio. Reported by Cassidy Kim(@cassidy6564). * d/control: replace libu2f-udev recommends with udev (closes: #1070283). . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/skia-vsx-instructions.patch: fix various issues. Checksums-Sha1: 6951aa4fe423be914a8c702a74e8d9c9422dc110 3772 chromium_124.0.6367.155-1~deb12u1.dsc 0cfbae73d86c66256a6c6ca76213c1d23787eb7c 838298184 chromium_124.0.6367.155.orig.tar.xz 19899d98f0b6d4c880a83a9dfc97d41297cbe094 415232 chromium_124.0.6367.155-1~deb12u1.debian.tar.xz 325950e56a8bb0c4f49c106bbe5b8d2d601b1e2e 21788 chromium_124.0.6367.155-1~deb12u1_source.buildinfo Checksums-Sha256: 80c1b6ebf91c6037d8b791a36122265a3c19e1ffff6991768a6e9cbb12e12b54 3772 chromium_124.0.6367.155-1~deb12u1.dsc 4d9c2e84cff499f522d66f030784a85c0b001fa27345e53da4375698311bd192 838298184 chromium_124.0.6367.155.orig.tar.xz 680b24d336dde1e84dbde79c65f874654211077406f73237ec1063e4cfdd44d3 415232 chromium_124.0.6367.155-1~deb12u1.debian.tar.xz f5277aba8b8174c049eea444dc4e6f6b7972ef8f7998bf542a748660cdf3e788 21788 chromium_124.0.6367.155-1~deb12u1_source.buildinfo Files: 0f8cb3885cc361445afecc4f47d08718 3772 web optional chromium_124.0.6367.155-1~deb12u1.dsc f303e448646290271509267b97825ad9 838298184 web optional chromium_124.0.6367.155.orig.tar.xz 6d7c3fefc0023e87661f57b7f9e4bb55 415232 web optional chromium_124.0.6367.155-1~deb12u1.debian.tar.xz 5800073ef745e28ab62e5aeb414143ef 21788 web optional chromium_124.0.6367.155-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmY7E0QUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjcvww//YR/Q/YUE9G9FBaDckDqHBBumi+dq PWgJQ9+ZEYxeRqK+J8Dx52yYxXQv9qoHW3s+22KQdFeWPDAZNKA55u9M+pjNgBh1 fTpgYCoG8OfiqQ4/caWVnxjVnw7UJz7+M5a6Jq40xQwhy9thhI4oV7fJoMgnZOZy 3vdE131slFmWnFaCIx59KLQUGv536jP22a6DdP324Syugwqb1igN5C0f1ZTj11Dm hXFUg3GC38JqxHn36SqJnDtpuPwUADYU8x2GjjeOcLume7542aY7SPSHgSBaXJB9 IHmMZOM1hENO0BlSq19nryzBL71Nal1RmOYS50sq9l8nwNV1DUlTvatCueR3QtPL 6uHd7LICM1q7WLyLPtp0eRG8hS+fbXdMmXLIdtxHHBDHZA9WRbk4yu1O0Wj2B0lJ esgkvBvIInpG0APrDZBPYf5AyopRRuFR2ChcxBZYaRsihZdtbS3UvSjgUHhvndrU OuoJunRrDyKPXm+IDaEh4YdK+6IpSNVfGC0UHgeNPUhynrTPNJ4iBzu28uxvnyq+ 6FdtEy9LVsdkVIrp0fLExH3HifcMdxaPvyMC+3fN7IA7E+tRREyniAqDsMWdCuwc ZHoLYsz5vSAvnur9jCOYnYIcAR+Gyi3xiD8sVfX2C1gsxrU6Gj2+IOYlA9fP5EwQ nw9I9p/nGN/LHQ4= =HOlT -----END PGP SIGNATURE-----