-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Nov 2019 01:09:41 +0000 Source: chromium Architecture: source Version: 78.0.3904.108-1~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Changes: chromium (78.0.3904.108-1~deb10u1) buster-security; urgency=medium . * New upstream security release. - CVE-2019-13723: Use-after-free in Bluetooth. Reported by Yuxiang Li - CVE-2019-13724: Out-of-bounds in Bluetooth. Reported by Yuxiang Li Checksums-Sha1: 27d2e56e85e80b71c1bd54533070a54aea604b37 4242 chromium_78.0.3904.108-1~deb10u1.dsc 777b4ef4cd47896115c266986d77d57ac78cb2a2 261632228 chromium_78.0.3904.108.orig.tar.xz 8e31dfcb04ed2bb23fe2d9a55007f2e843e99869 188236 chromium_78.0.3904.108-1~deb10u1.debian.tar.xz 740d21226b4929a2570eb704ed0b1e59eb4b8be6 21529 chromium_78.0.3904.108-1~deb10u1_source.buildinfo Checksums-Sha256: 3267c547b51ac70741f348662ac2955629b55060a12c13ea7597586c28d574f0 4242 chromium_78.0.3904.108-1~deb10u1.dsc 6538d15f4961d2f3ed18e0004231fd5e40b976d7807266dcd317f95c4e6d8d18 261632228 chromium_78.0.3904.108.orig.tar.xz 0aa640b83bb48948c9a930053f1876551db730a09b6c49acb83df01480126d5a 188236 chromium_78.0.3904.108-1~deb10u1.debian.tar.xz 1cc0b22c159010b3213b11ffb0c66c549dc0e37a709a9656febc041119b3538d 21529 chromium_78.0.3904.108-1~deb10u1_source.buildinfo Files: 47a55705a3eacc27a0423bdef3a1c8c7 4242 web optional chromium_78.0.3904.108-1~deb10u1.dsc 78553f8d90ea768263a9c5762ff53df9 261632228 web optional chromium_78.0.3904.108.orig.tar.xz 804d91d6f5ff92f0bb500499a9b82e8b 188236 web optional chromium_78.0.3904.108-1~deb10u1.debian.tar.xz 2560da48ec37597ae68e3d261b478c06 21529 web optional chromium_78.0.3904.108-1~deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEIwTlZiOEpzUxIyp4mD40ZYkUaygFAl3XlJMACgkQmD40ZYkU ayjnNiAA21Zlu+UADZShUuiAVLEZxTwU4QZdjRyS2V33oruK7qTPMRt0l+e7LIF3 EAZmgppR8mx5FpCN1pScw/x/R2mq2CqTiNMrPI6EXRqIg21Y7/omqM2kgAmN/D8P zsMhiXv3y+OW45vu1yFCfCrYmpJX39wltvt/Lzx8e0lJ8Um8qNO9RCtuC/Sz5L2V l2+MStrIuF9NusmB+LH6qD31QRmkTOvJityu5HN1GmgZHHdQztJl1WkAZzWwjCP2 4SkBH7duoUA0ZFnVdCrNv2Lm2TBbQTSY9gvhYiA4CQEGzA/DMXYC6IZISJwihfvp jUqsoiaWIvCgxAn+MujzaYPrfMZhVylRINnfElycof3gugyzny8SetZUdK6cVyYu 5PcmN47qmNi/B9Ny+SyOgoxEC65SXJVDUMRr79OMASV6FXcMXgCgwFgRCxzCMN8p AZGrKBfD0d8vaKYsAQ9bMzZ4M9Hu1NAEunrE82CY8ehGwtblXoWDAbLNtBiSIoZW GY5FJE2gHh4+NgrNRUIBKJOy6GwEucDdUe3v4RqsvciGT0TlcrRJN9BBXKk6vjnT 4DI0ciZ3h0CSZQLNVdrKrqlHMejuZUDvM4SAcu0GGUXic+snV6FykaDcW3qEYSat b/NCtrLyn5S/noJFq9Ira7Fog9E7Oyk7yafdFozj2cpPqb0+OiqkRh0PQdYaeGc+ TU6+srBLA/XxQfm9+pg6Z7SGHgnt5JoLig/obRgRObwP9X2yad6jaipO+c2P73yj +g9qQenJN1Bn/497YFHWTwfXkRaIGGJOh4f2hTnAYLNB0Nv3ssExduF+vvm2UKy9 bwZHXKtpTilT71yrPHWSC/v31pgb/zeosuvcuE23ZcVadZ8kVNjPV9xNgL8MyrTn l5nAq+wUT/Esh5uSE3wqMHok4ugGA/v+XCk84s1VepFKM/e84C+MZbthI5vxBu2z FbdZk0WM7b6nAxFxzsREtZhRzk5OZH6T1Kn96PXz74oNOqmpPOvPcOZ7Rbuqsoa/ Lyw0etaM56UuxEZH/RV7BqdbNw/CG/2HyzGejKZPiydU08mKsxEjBac7HwlAlHvh VrPM8pvTh0wJfw4bWKowN4BdHDvLVxPEnRACzM9ioZ1Kvs3jHB/pwFr16jasPnr9 pZCc1GQLSGUU8A9HXSr98/plV9VGLfPbIz4NH1OrkdzfybkGzTs3vKUWVdlwskzp ms8cEdo2Y2699YrtyOyeTPx5MO577AE7xQeOCdE+W2xleY4Co4Zr9MTuC8QmhPq0 jG/gXEvcKSjvuWbZUf/y7M9nbr6Jk+lKpba9k947bruQsfwUxjTa9/fVeROucPfd FSLSVCMFgfFoXkD0St0yFg2S3qqNWQ== =XdYB -----END PGP SIGNATURE-----