-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 03 Feb 2021 11:11:02 +0100
Source: chromium
Architecture: source
Version: 88.0.4324.146-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Michel Le Bihan <michel@lebihan.pl>
Changes:
chromium (88.0.4324.146-1) unstable; urgency=medium
.
* New upstream stable release.
- CVE-2021-21142: Use after free in Payments. Reported by Khalil Zhani
- CVE-2021-21143: Heap buffer overflow in Extensions. Reported by Allen
Parker & Alex Morgan of MU
- CVE-2021-21144: Heap buffer overflow in Tab Groups. Reported by Leecraso
and Guang Gong of 360 Alpha Lab
- CVE-2021-21145: Use after free in Fonts. Reported by Anonymous
- CVE-2021-21146: Use after free in Navigation. Reported by Alison Huffman
and Choongwoo Han of Microsoft Browser Vulnerability Research
- CVE-2021-21147: Inappropriate implementation in Skia. Reported by Roman
Starkov
Checksums-Sha1:
ce22ec06a8676ecd2b112bfc23c3c28208b04f0f 3628 chromium_88.0.4324.146-1.dsc
0158a9701ee90d1c7105a57980a434002b18ca4d 388887496 chromium_88.0.4324.146.orig.tar.xz
7563029054977a79d68981cb0606a9b020230a4a 184008 chromium_88.0.4324.146-1.debian.tar.xz
Checksums-Sha256:
48fbbbe0c81f4eda86776149299cee3d01f194058b572b942de7b1283acf4802 3628 chromium_88.0.4324.146-1.dsc
b08fb9efff145ee0ab85cacb2949dbc2452067759e442cb148557abf7ad86f03 388887496 chromium_88.0.4324.146.orig.tar.xz
3f859b5cf3e7a4b3380594f6aa1569ae5652c492732aed82b36246785203059c 184008 chromium_88.0.4324.146-1.debian.tar.xz
Files:
3396872887188c975988d6316acef8a9 3628 web optional chromium_88.0.4324.146-1.dsc
c0cf85fa1778eb4375ce549271ddf859 388887496 web optional chromium_88.0.4324.146.orig.tar.xz
8e29619926bdd83a588731a69662162f 184008 web optional chromium_88.0.4324.146-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAmAa6JMACgkQCBa54Yx2
K606ag//S1HkwB7BBwiLQgW/FwLpEurZgzszpSbNd9HwTEQEE/x0+WI4zOG4e5iO
gFLrCOHwNQOJLaDvz8zYn2bLTXhQuIJub0FQMNkuMaHQyx4HoU5ZW41DLUKVKwgu
K/uaA0Ru/DH160sii0TkvH0YfwcB7nTP1KLFWicVSzjexXHezoxMo0hFqDYlFSSi
JEHyAaOdNO7qfkJh+0ckLH3sQP20lG9dELPij+7VMYbYMLisKxkDg0/1Apx+v7dT
VoZ3oq+sR3fcRHFvTMyWsLOQD41IeiXiAA4aOF2bJ+0NJCDh7plJgLI+OOPe6c4K
QNFGDr33ubEUW5BK2mq0twUamrExyWqdM74M3D0HhbO3YkLJ3OHN3ArltjlWLnUg
Ce9A9XyErgPn4F5vowIpqEoHtKNSmoW10uzrwSLdU6q6BffVJ7svb1RMU55o/FJ2
9iM/LRRw9nKk3hRAeMvsivuIoi+bW/nAjEhTgEwlT7S9rfJ7NqIlCi5Bg4slkUla
Mp5mFgn0XR3CrQcYk/vrVfioJi/p23XRpgaFKCtIxCyX40OlZDuX3ECWUBJJYnvI
ni+t5R4ukp8DA/NLHx+jG4/i0ypsAezHn4GsferafVFbs7kFEFyt0SoJVER4I+d7
wgAu5yCmpSLGwytGX0HFyBmm0g33HnVUuUbvOHR9/EIhMcsIlg8=
=ChJX
-----END PGP SIGNATURE-----
