-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 01 Aug 2020 03:00:31 +0000 Source: chromium Architecture: source Version: 84.0.4147.105-1 Distribution: experimental Urgency: medium Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Changes: chromium (84.0.4147.105-1) experimental; urgency=medium . * New upstream security release. - CVE-2020-6537: Type Confusion in V8. Reported by Rong Jian and Guang Gong - CVE-2020-6532: Use after free in SCTP. Reported by Anonymous - CVE-2020-6538: Inappropriate implementation in WebView. Reported by Yongke Wang and Aryb1n - CVE-2020-6539: Use after free in CSS. Reported by Oriol Brufau - CVE-2020-6540: Heap buffer overflow in Skia. Reported by Zhen Zhou - CVE-2020-6541: Use after free in WebUSB. Reported by Sergei Glazunov Checksums-Sha1: 5ec413bd4a8582d3e083a8bc6c1030227f0d98bf 4301 chromium_84.0.4147.105-1.dsc 474b183b1d16422fb8e852f5bfa2562b926be82a 336733648 chromium_84.0.4147.105.orig.tar.xz d40d1779a41f54e09951f15bd62d752c747a8902 164188 chromium_84.0.4147.105-1.debian.tar.xz fa41b0457d82c171055ee438ef81d6f106e00405 21527 chromium_84.0.4147.105-1_source.buildinfo Checksums-Sha256: 34284536b5714265119c868297377e35ab8773e9e34bacfd6ac3b63b086f08a8 4301 chromium_84.0.4147.105-1.dsc d8f841a28bae1ba0d70b37b5f1f2d8b37f6815cd57c212e4db45000aff3c0f76 336733648 chromium_84.0.4147.105.orig.tar.xz e8773d3f2f01c301743f5a1762c652d30b4031fdfb350025cdc051913f3a8e87 164188 chromium_84.0.4147.105-1.debian.tar.xz 7875f4acb66d4d7bebb6fb9eb8124d95956756f0f27da1a0ca5369b67fd87628 21527 chromium_84.0.4147.105-1_source.buildinfo Files: 272bd35996ba8612a508ecf0f974d865 4301 web optional chromium_84.0.4147.105-1.dsc 25cb1719a2f045abbe3b9d0eab6f4d6c 336733648 web optional chromium_84.0.4147.105.orig.tar.xz 72f6ab926271a267bcb9247f779fbe05 164188 web optional chromium_84.0.4147.105-1.debian.tar.xz 9da884059480ead0406e32b0f7552902 21527 web optional chromium_84.0.4147.105-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEIwTlZiOEpzUxIyp4mD40ZYkUaygFAl8uvnMACgkQmD40ZYkU ayjgGB/9FHNCSt5xYHYbfOsjdF4RvyCzgRDlDR/W/waun7nct8Ha6rXpIiNMb/Mk 0+G3ZcHiHLlRG36wwI//TdW31CUVR1LFmU6+LJWezarKp5cKWna7/mompUzzM2uz v3u9aQ6d9COGEuA4nZ+suzGFAa0OZv+s0eIBkBt7yecrkQwNpkBeDM1rj//EFrny 7E+WPjIP5uzxAYaNxL33arGjk5jlRKln7oWg/FS4jln0mR1KR1Ogvu+n9WhPGZB9 jnGAtQVmS5ITmAf5qWTMtr2zPwF/dISEfulRr2gu/sEMXtQQKKP0kykI/xhly9L3 BEpD6Zk9a53uLdmOmibQZdr9sg9m9OCPwLGwCnuHRYnsPvLXwWSp7BvDexRPrbEe VwhX52j8Guw2jmSgKLthdNUSXKmXIVmrR69l1EIGUTlorAhtJqAaDLpXZ869igwY GY7fjg0d9k/EGMsby9w8mQThLRw6yXOLnRD+nEv4834u6tEgN6Hg0AP6eWXZV6ga NbFwMibQGYFvSq7P7gz93Kyubvqk6U9W78ehzzGOjUWYE36rEBpkdLug/4jAYOcv BOP62Bn12xdu0vC4xcQHne4pU2k8tyygZI8eJW4ja67VMTGEzfto1h3ADMx8Myoh b5oziiSGQRvlU060x27wbkUvdftPDMZxTL+EocbD0odkKuwLZzYRJF/+pgiVHSIQ PalyycHf7RTgjsC22egZ/it3zPjDcVOdtsQrIFp11pZAAvxDj049+qxBMpXDiJqi vezl0jrftOUF9HZ833OibOt+gCD0/22xC+u3YalrnV4FIcXLoNWqgI34PZljweCS pEAdS8bfoNCCBbW4MYOD8q/aoEap+r+P+t/+SH/VeYE4bPJAm3D/TmgAb+60UKx8 /yn0FQb9DptlmgSzPwDQ4rWQac8GLwvWHyEDa9I9RqPeafILk4vlW7Regi1XfwKN T1dvgpswtykQgEWlwfszoYxlzOve2vG1ljTU8sVDJ0xMKPUyptHQ1vtMTC/Dny6L PgVrWFU/WxFPwZhClWky26MLtOIh7iZs8ovehaZoxS1wTCF88WyQCP1SFlLh5jue MqOfw0wBTx61f+q6WiX2340EL2Z1/5v7n+jnILoWpbdzU1JX6+GVV/bTdBOYDPhR RHJzC0ZFHhOZ1WPoM2knz2hByW2a/o+/MgiiWIz8UrPWkPczAQtywk16ZnfJmChZ T5JUDkOxruT1baTertPMUlfU0jCAvWj50NLguCJS+YxYA0RDdyYpSCFOAt9RG9Al pd9PlT/kmJunHU7JsCMXMDjfr2ztquFAXnJpDu/3Gfvep9H/LdbRnW5ggX+05N+t txqR84tnrpjdOsSAjVBaDq3xTJyZmA== =tYq7 -----END PGP SIGNATURE-----