-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 Apr 2020 04:30:14 +0000 Source: chromium Architecture: source Version: 80.0.3987.162-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Changes: chromium (80.0.3987.162-1) unstable; urgency=medium . * New upstream security release. - CVE-2020-6450: Use after free in WebAudio. Reported by Man Yue Mo - CVE-2020-6451: Use after free in WebAudio. Reported by Man Yue Mo - CVE-2020-6452: Heap buffer overflow in media. Reported by asnine Checksums-Sha1: 6264dd34e6376b06f50b908166b4b68fa1476089 4206 chromium_80.0.3987.162-1.dsc bd964270e4aed339ba22418b54ff06c5a2f60233 313251852 chromium_80.0.3987.162.orig.tar.xz d6e0259516d2180218ff5fa33068ed123cfe021c 195284 chromium_80.0.3987.162-1.debian.tar.xz f3572c79e7aea71a9369d260b2621d44adecd45c 21459 chromium_80.0.3987.162-1_source.buildinfo Checksums-Sha256: cdd23f8080acdac280d73103dc938a01e435e6cc92ca5004cc32d60f3b3c1a2f 4206 chromium_80.0.3987.162-1.dsc 49356a50ab8b85632fb641fd8cdbd434a2d26c69d05c08f95c071479e73ea9d2 313251852 chromium_80.0.3987.162.orig.tar.xz 242247ac493a3d97a57f1771af484a61f134411454c66e079eddd331e131955d 195284 chromium_80.0.3987.162-1.debian.tar.xz 72027bf5b4259eb7e10ce5ac957c64c4fa996289f0a1169554732cfe7d3df85e 21459 chromium_80.0.3987.162-1_source.buildinfo Files: 4359eed21a550bb26259e1d6fc629163 4206 web optional chromium_80.0.3987.162-1.dsc 544b5cca35b63c615b90f7d52c54ca4f 313251852 web optional chromium_80.0.3987.162.orig.tar.xz 763922c9125e2425651ed1852b95143d 195284 web optional chromium_80.0.3987.162-1.debian.tar.xz 1b89700290f3edd900df5050794df646 21459 web optional chromium_80.0.3987.162-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEIwTlZiOEpzUxIyp4mD40ZYkUaygFAl6EIvYACgkQmD40ZYkU ayhVeiAAtGb5OnqicnOkl10r/hpqGn9T4iYXexeWhehfvxXjz+Y1yKsC0EXmT/4B tUYvHSWFLunj9ob/mwQBEJOZQgCsUxNiGNmkuW3nleKQPht31l7DiklNcMUQxPKe HkPuQIRkpYBRXbb+Xtaa6AXRy7WTo2r+CH/dJNLppw/jqGoOyGzLbDGBfRA7WoTN PF2mZc0B8DEWdoUCh8NtOcENQtJBRRYcQL6OIZZ7q1XQK3/WisSLgDDgnPPGD6zq wskq0wwskEv7ftxtgnmxrFrfgPPkBeh4IXY7VjKKufGCy7uPWKY9QXnwAHM1Z+EB /hNFMaRJ5DUA21s+csXsZJHvqX6CqCbRZowFuwGCNx5Vj0nGy7zJ8HlolcKR1e3j pnJ6aeUZZSXoEdL30vDY5MumC9pz4PQphlDmJrOHjzyVIOdW38ymHBpelX+DKkUr v9YVy1x2Ov20QJl7QO7hRt1g0SWs4AtdI2Q7MC1YZ1cu8UVF3VnBtPs0xzYQZVWN IMahKrIDkWfUqtOrS8YSJx6dvqXb5GhBgDBnCqb/wFUPuy8LctDl6KrivYcsEtYV MOj+RhrbdNbMu6bBs1E30Kh3IaT0HukcjOLtaIZghD8nMh7uMiwbpt/SG+xR1NPK 26myMMk7SDZHv9eK9jwx4/2JSWkye0lBvoBvZ2GGYmscWwE4NZUS9itMDvPEGtBk Ra6ELf37Kt8qR/y+kLMx1wKEpcm2V+Z95JBzXpnlt6Ro/6/R1dUChKz9varSa238 UanbDKC/cfMlKfmWsAEGrblEo4eqQYV83FqRgIui6Iw1qPlirW9h8ssflM2t+e8I RLpl/+G1L0qykjcefs/NmT5mZnMeiW2GXorRm6iCX0KaSXCqji7bW+Rd2DsQY9zS r+QQh1xdViICKhVSqXMYlBpjuAIW1mxIFmr/M1xadtq9KfFJj2U9EKLsStHbLUtT qecwxDIelQXZHtozb4DR69Un48lbAUa/AzoVmwmDZFk+5aULzJV1DxCxutwcUGtB y98Y5gpyo1ZuYieyZjAPq8ZD9m4cb3aodY+2qkCE14DygM623FuqhZE3/ad7E4/u /zmUPsS419+Xw4LVqvFUbqbWIXKZWXDlgACamiEMvKEpWPUmJS8CrltJFJ887GRa ABqxKurEayg4LcYlYhI1Mx2JQWX8Qek3rrTmnaDErM05Ag4LCLfYHKhr0mwX1UVA YSN/CwonN34gioycN0ySViL2e+x+YYVLTcXLLL/Pe8lMPYkBgbaCMj/kXXPzU094 Ul1t3oUx/F7aoqa+O4uRN0lf22d4YVtmGXGbfljCSgXThWdyzrM3ra7ABk6LnY+I Lq2IvW9J2XiMTxaiFMiYf2IbmYobow== =V8/+ -----END PGP SIGNATURE-----