-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 May 2021 02:50:43 +0000 Source: chromium Architecture: source Version: 90.0.4430.212-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Changes: chromium (90.0.4430.212-1) unstable; urgency=medium . * New upstream security release. - CVE-2021-30506: Incorrect security UI in Web App Installs. Reported by @retsew0x01 - CVE-2021-30507: Inappropriate implementation in Offline. Reported by Alison Huffman - CVE-2021-30508: Heap buffer overflow in Media Feeds. Reported by Leecraso and Guang Gong - CVE-2021-30509: Out of bounds write in Tab Strip. Reported by David Erceg - CVE-2021-30510: Race in Aura. Reported by Weipeng Jiang - CVE-2021-30511: Out of bounds read in Tab Groups. Reported by David Erceg - CVE-2021-30512: Use after free in Notifications. Reported by ZhanJia Song - CVE-2021-30513: Type Confusion in V8. Reported by Man Yue Mo - CVE-2021-30514: Use after free in Autofill. Reported by koocola and Wang - CVE-2021-30515: Use after free in File API. Reported by Rong Jian and Guang Gong - CVE-2021-30516: Heap buffer overflow in History. Reported by ZhanJia Song - CVE-2021-30517: Type Confusion in V8. Reported by laural - CVE-2021-30518: Heap buffer overflow in Reader Mode. Reported by Jun Kokatsu - CVE-2021-30519: Use after free in Payments. Reported by asnine - CVE-2021-30520: Use after free in Tab Strip. Reported by Khalil Zhani Checksums-Sha1: eed5d387957d29d8d0bae1e9670a220ec7bd7a44 4341 chromium_90.0.4430.212-1.dsc f18208172b74d7b55a953a35d4604a9084063e96 456217856 chromium_90.0.4430.212.orig.tar.xz d23e5986e019b9e25314ef13a82ce0f136e4c9da 213256 chromium_90.0.4430.212-1.debian.tar.xz c8604c997456568337d8119c4c6b2f8e0f9b0d60 21984 chromium_90.0.4430.212-1_source.buildinfo Checksums-Sha256: 35207ac8916741d13d765bec44d91a00e2e2635358adf9e5dfe9284243f8457d 4341 chromium_90.0.4430.212-1.dsc f614b72223947a3991b37b9980a8dc83c4f00b9a863f629e2cf8af7e13ac6421 456217856 chromium_90.0.4430.212.orig.tar.xz 55940132591491c33a29bfc742b98006f5d55871b7373d6d03a86ba14a173ef9 213256 chromium_90.0.4430.212-1.debian.tar.xz 603e8efd2d070b361af271a654d9686279296d5a21070332659b33b8c4b66b63 21984 chromium_90.0.4430.212-1_source.buildinfo Files: 98fcd99df5165fedd4d0309bf068efa6 4341 web optional chromium_90.0.4430.212-1.dsc 6fcab1ab3e6fd9c90dd8e26d42606418 456217856 web optional chromium_90.0.4430.212.orig.tar.xz c235b1551c03cc59d958bd0d172da204 213256 web optional chromium_90.0.4430.212-1.debian.tar.xz b6f733ee05238e7f7b9b95354b2cf9c4 21984 web optional chromium_90.0.4430.212-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEIwTlZiOEpzUxIyp4mD40ZYkUaygFAmCgGtsACgkQmD40ZYkU ayjFXiAAtOQLDwG8dzWt/pyrQOQ5HIAehBrM71Mu4t/oDOzhfyW5ul46qny+XfgQ dMrxL402f2WrjnUKBQYKNvprm3SKkIKrZpYLyWIYxDWabMLKClZc7S4Ox59bD+O4 uum9Zrh7nJXNBBjbZ7KSOGdf2FHEyDheSVAr2bvznhW6NWiIm63OV4Ofzu5tLZWG 3tokG2K5RIpO74+Oy84ttu01DBZxQugPI7bsO4t+Ugjhrk8Jb3udTi4ejCKK306Q vv+ox96GHWETtX6+yZOvr7V3gTYP35T9Z2f/SZ17kb7MtadIcBRDPDFhC1paK/c9 68pQUQpAQvXMwG/ffhj9KQ7bmFnIS56DkkJPpT7HkE5Xm3DAJZmyqECT7wej/oxv FFnie6rRNHqSHWLsWw0XCKSLRl9KF7NSxWeou/zC1vVEDk+l8p28THlgtxhJMoKS mgKcaqUmKAYuzYU8rBXv4JnYRe4yqDUnHLfjyCKllTyGe5ovolxneQClxVitp1Iu s5JnJpa6wJv+IsWgKhHjjxHSFTYuOfVWa4G+Izx2QU1zBSBRNybq6ZY14SH2+Fnp WwdXybW2hysgM6uMUX1pgtp9jsA5ipagkUoFLV30QljUUlJ/ZxnVevUlgXDtEXeO A9wPRnLU2v9AiYXLPxGWohOR4aWNzGJaoU7blY3wMNWZzuIzd4n47Jc/B/XIkbH4 YTiGSMuJs0II9/18czEeIeBhFi4hy5B4dBgX7wZv0hP8cZ7cjr1hoRBt52YCNHMe T3WrsMVoZbAr2vt+Jg/9mDP1N4/G65yh1iP/OoyAxWRFnQeSPIYGFJYJ0XNp/SMA eZ20WxMONvK2jiYhu+MXsEdMSqRwgVfb1huWTsAOwCK5uapKS5DumZCWt5+MGA6N SJbeQvs3DvYItQvXglCPStaeCNTv+WyyvxnADu+sYGJrGsfzqdNPVDNh5WGGqSxu V3wGeZFlhNy6MRyuhJ1fBS4uYxch0CWUWZj+x82XvKGl5HBaaD+IJlw6T++9F2md 2kkhXFDscQjol47x9AOEFtqSHnBy02EYCsI/fgbh7VzbT6ANQBxZcMNLv38nWw6H cfy2m4jpGGz/l8YQuVyAKimTZGxYeAJGl60CD8PQvcsTwqwiS+4oipQyuVzlmdNU Mzn5ZAYThtgYENv63GHPsnNfLPaij1LJbW7e4S6ihLYrNjyWr7FuFJZglL96BPrB xU+BbM8AEYvpyUAfa1k2glB4fF/H0jx0QMgRsmWT9Wcb3cMlgNCvBlPAI7CDz6JH p2dfENAYWoYnyQvRlHWQQfQpJ3M1+Ug5cFu7GFRVBSSZt7DyH7zHzJcV82zlWKSF wIJ/UgvszYSllL/6dZc6iTimlut9HA== =xN1m -----END PGP SIGNATURE-----