-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Apr 2020 22:23:57 +0000 Source: chromium Architecture: source Version: 80.0.3987.162-1~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Changes: chromium (80.0.3987.162-1~deb10u1) buster-security; urgency=medium . * New upstream security release. - CVE-2020-6450: Use after free in WebAudio. Reported by Man Yue Mo - CVE-2020-6451: Use after free in WebAudio. Reported by Man Yue Mo - CVE-2020-6452: Heap buffer overflow in media. Reported by asnine Checksums-Sha1: c19cec6016775e6ecb9994b423f6342a36c9a20d 4262 chromium_80.0.3987.162-1~deb10u1.dsc bd964270e4aed339ba22418b54ff06c5a2f60233 313251852 chromium_80.0.3987.162.orig.tar.xz 4e34537fb4776cf6c4fdc0dc1a0fa75c857881cc 194056 chromium_80.0.3987.162-1~deb10u1.debian.tar.xz ae27661eab47ac855a6716b3764843dbf8b7d048 22290 chromium_80.0.3987.162-1~deb10u1_source.buildinfo Checksums-Sha256: 826813c73a75ba2931af4a736d194f8d6bc380870b3ed906f171995e136c71fd 4262 chromium_80.0.3987.162-1~deb10u1.dsc 49356a50ab8b85632fb641fd8cdbd434a2d26c69d05c08f95c071479e73ea9d2 313251852 chromium_80.0.3987.162.orig.tar.xz 65efc695caaba940debe0bfc61ba6080ca55d21094efd4fee9c74465175c1d25 194056 chromium_80.0.3987.162-1~deb10u1.debian.tar.xz e756dca08e742ee35305759da4f4a911d7729c6bd201904a115d3dafa8f8ea72 22290 chromium_80.0.3987.162-1~deb10u1_source.buildinfo Files: acb6f3a782d1e9372159f32ab34d68f6 4262 web optional chromium_80.0.3987.162-1~deb10u1.dsc 544b5cca35b63c615b90f7d52c54ca4f 313251852 web optional chromium_80.0.3987.162.orig.tar.xz 89b3c7bb4f4d271a01c3ddb52dc991d7 194056 web optional chromium_80.0.3987.162-1~deb10u1.debian.tar.xz 9bf1acef7da18c29c9c08deeb404c5af 22290 web optional chromium_80.0.3987.162-1~deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEIwTlZiOEpzUxIyp4mD40ZYkUaygFAl6Il9AACgkQmD40ZYkU ayg45R/8DGa0qpX23WSlAvwSs5wl8TxgsraMFIHWSWjv6c5lNJtxqIhiQtiFV2Oo EjL1xeRs7yH6mex/yQapGzsMeQSQI1tDC0EpLGrx4lnHiTQuy5quKX3s5bkLuUxM 19bV8uCEHlzTUnhirrHM8trjU2sEFcnJ+AIFkbalEUOkCBDHQfcVehCKclk+DPW+ VExXmTVMsA6Tn6HTAnyQaqrhzymwa6tUkNpJkDO4SyeA5GzZnPt1jtKa4RtQIRVj w7lG9Rzh0XZYgg+xyIcuWfcz4joAjBKb5ABPjHJhPFSD0+mQQzIl2uaGEmlFhWtD T4L8XVpyFRiAAsYtyVmCGXrZK76+2rALAO3cyeDQaB63qT6TI1oLOSL+xmETQz9O zkclj7pBmUIeBeqqGzBgqlg7DUvFP3HfpfFUscKkf1dP5zfceJj4zJi3dxeKoJIs WCxNZ56xEEBbpNvkgV5I7l5IYDTfOYC3Qvh5zQ4XF2wtzpyJA217uNf8Ulv+rM1s E6yMnEw3Dv0NFfoqC/fKEs6yLA88o7t7hH4COGN5HhZ+NarRMGt9wi6sYe53cttz mU4+EAV6PksuCDh1CL3MFpxi8ts/LNTrRMztw4nCIwezOuy3K1PgAobVlQzfVsGn WIgo37AldGKwBfeiGnTk70CapBQ1OMnu8w1Y12rxJG2XGyvNkFj/vQmO2s7jNExG zcq5USNUiBg5AguBJQ6BpDhIP5F1o3HeZW5r58LMrJHJKavAv7gWVLiPvlSwgCx6 gJmWn9EbypgyA7mOyc0Ij0Z3+Qf089tcnzaSmi+GE3W+BfSrWcUkKG1ob+mgMRB5 ChZDH5kicTKmelVcWg9w4XOmcvq6lTo5hE8rxUianEjh+683EXzx7hysuR7sfq4q nawwg+zYFz093Tnmi/H4IRuNP4pbUT+7GMjBFK6Bh46TWcOyi0tmPr/MAf5vgA1+ FxUY+US8CI8zqixvSnJmJ0X22RVwI3bzG/LMVC0CCIV9CaKWQJAnIY/Aqk2KsEcv bos5CX2ghxhBw9fYx7EoH/ibC4otZ4Yms0RNn0m0mwDPdH9Wpmptx73MVMW82I3t qDBHzS3+Bs+D3Orzj+Xv2N4IuP85imXh1sa8ahVcOIFIX4wQaUeVWi0RQBzjeL9W KmHtJA60aFzPhNo7/ASX9+gazQfWQzvQMKESq4fTMNYN3Z/ftoPk8g67UzjjupJE 08/e0sApUdPNMuqW0noiH6ZOyZ2jBb/H/HBkSyEOA6bYkZNDxcmPXU2Flmcj3uPL 73Hjs+ehReCKBZrx9ge4Ndq35VOuIYCO8WZF+iKM2fFyONBSadjvIgBjkveXZbqt rjPa3lIiJKlnw+qL2NRI6BNGS2xSfQ== =r1Gv -----END PGP SIGNATURE-----