-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 May 2024 22:11:26 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 125.0.6422.141-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (125.0.6422.141-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-5493: Heap buffer overflow in WebRTC. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5494: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5495: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5496: Use after free in Media Session. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5497: Out of bounds memory access in Keyboard Inputs. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2024-5498: Use after free in Presentation API. - CVE-2024-5499: Out of bounds write in Streams API. * d/patches/fixes/libxml-parseerr.patch: move to bookworm directory. * d/control: add versioned build-dep on libxml2-dev < 2.10. Checksums-Sha1: 2eaec17c91ed0b418035bd85aeddcc6cf083b91c 1310892 chromium-common-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb 3bd5a1033d38e91a0c91b8d80a381e20cab6f7d9 4942772 chromium-common_125.0.6422.141-1~deb12u1_armhf.deb 66f901a89ae2960a756f117b82e5bbfe68e5a043 35166504 chromium-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb a9c6a35136e6866e8c59f5f7b03ae1e2174b51cb 5921024 chromium-driver_125.0.6422.141-1~deb12u1_armhf.deb b936494bbccd3f0becd1bfca739488089e9b3847 12220 chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb ba0a49a2c5b0d5360b95d4ff3c39c90c0b19cc3b 90028 chromium-sandbox_125.0.6422.141-1~deb12u1_armhf.deb aa18ba4815b43cdda6f9398288d27a7d38c3a7df 29189812 chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb 194791257fca0859f6f250eb3c740899df050243 48284168 chromium-shell_125.0.6422.141-1~deb12u1_armhf.deb 8f1fcc97bc16cc20d6f88915512974c28573c4c9 24672 chromium_125.0.6422.141-1~deb12u1_armhf-buildd.buildinfo e3500bf558caae05b5be76f98be04e30819bedb6 69443468 chromium_125.0.6422.141-1~deb12u1_armhf.deb Checksums-Sha256: 1c18a0ff38dd51cd30e74abf45008996cd6309f5a8cba6ca11bf01390164c8d3 1310892 chromium-common-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb d1a2888c281d017b3a1aacfdef07513a1b86b75ca0483c2b8f55fa8d5d6686bc 4942772 chromium-common_125.0.6422.141-1~deb12u1_armhf.deb 034683446e0b73c4ba5bd4569ff9d7989922a6c1a64c88f0b7540080674f96ce 35166504 chromium-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb e7825421a2c7cf2ebdca984064394fb7ffde9109990480718f0bf303abf7acb3 5921024 chromium-driver_125.0.6422.141-1~deb12u1_armhf.deb 988d482c81a499acae674719fada6883fac6a40fc6d7ec378fa1ba38c009bd12 12220 chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb c1786aa88beb701be1a7220e5aa6677da089e664f64bbe246451b813b88436f2 90028 chromium-sandbox_125.0.6422.141-1~deb12u1_armhf.deb 1851ef5004da85c6e456e84792f7a195b1c8b2696f4de6635a88f5a8a092962b 29189812 chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb 8ceed121f83bd357ced8ce8b4dcb2d8b14020a7129609565f2a8721eddb0ae3e 48284168 chromium-shell_125.0.6422.141-1~deb12u1_armhf.deb ee05ea703d92799359397eb16ac8f6f1f5dfba45209ed162d8f4b20f5ae8ed25 24672 chromium_125.0.6422.141-1~deb12u1_armhf-buildd.buildinfo 74b6c7b0016ecbd23ce5046b364eb9091f54f9ab3444473299487d22fc6b1355 69443468 chromium_125.0.6422.141-1~deb12u1_armhf.deb Files: df960e5c6788442e5e1464ef25b74a79 1310892 debug optional chromium-common-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb e47b285f9fc5cca0e72df4900b964271 4942772 web optional chromium-common_125.0.6422.141-1~deb12u1_armhf.deb 9aff7edb2da6f46d868d93c3c3522984 35166504 debug optional chromium-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb 048e8f143ae79f3ff53c448dc7d69f7d 5921024 web optional chromium-driver_125.0.6422.141-1~deb12u1_armhf.deb db580846250676b2df4cf41c7fc24944 12220 debug optional chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb 2bc568c9c3c28fc07aec4a055ce994ff 90028 web optional chromium-sandbox_125.0.6422.141-1~deb12u1_armhf.deb 9404a8171677951d62ce90de3aeee52e 29189812 debug optional chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_armhf.deb d285753a743d68b7e29291cd766e166a 48284168 web optional chromium-shell_125.0.6422.141-1~deb12u1_armhf.deb 69931d47d26f98735698116e474c97ff 24672 web optional chromium_125.0.6422.141-1~deb12u1_armhf-buildd.buildinfo 2e4ef5f8c0bb9bb6339d55b199381c9d 69443468 web optional chromium_125.0.6422.141-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElif5H+pIB11ZS5Aay8vyjiVDuNYFAmZaCYAACgkQy8vyjiVD uNb8/BAAqxt5VGWmQgpv2wNFmyyzE4VgyiwC8xTnGM+ZNTBss38ZFvW83Mb2NpXu vkvR3OPC6QViMRYmqf2oJEm8hghOdszlZaXzDjtN1aE+dpLG1WL5FG2/Xrc95tRF 4gcrjnbaVFkykueRtm6KMWa+H/Er0Op3GBY42DM6tSuZ4abpRMXh7QbTx/YaiDER eIO1f96Japt2YnI/hFCxLpLf3dfZ5gznUn5YdhUO8xMhPJOfqe+u3gJZNZOT7T9y H7EBRr8UOSkL/+tkX03MzfdqiagCT5e/iQ192M+k+mTALcz0uOmwb+xHIwlvhMc9 /+joI0+y4yUeWepeA7qRNVLU93ARAyW7qJeSPGhPsuY4p1YB36fT/Jkhqx50hwFY 6k8sG/D9C3eVASIa0QXxdDOFmiGCFUt/94j7MxDfCSAYD/UjL6qHVocNh7XbaH8o agE20oKsrobPtEBcDQh5QTxPaWaCSyBYNV2x8Zzcqhaq7vNWUE2uzfsr4bBEbKIm VIQcWCSkNdGsbO39eaZWrjYPCcZscclfyfg90qvbbxuBMZWYfgXuXlQjGuHSLmVt bSLk1e59ELcI+TtF/JdKjPeMZul9QNewSUdniA9kPRBRTPeCTDz7KOXyUc3N07w1 VGPNyfq8airrc9kACEQw2qPW/EEUHuiPRsAfhxd3hkuyCrxKqvs= =o1vv -----END PGP SIGNATURE-----