-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 06 Apr 2022 04:35:21 -0400
Source: chromium
Architecture: source
Version: 100.0.4896.75-1~deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (100.0.4896.75-1~deb11u1) bullseye-security; urgency=high
.
* debian/copyright:
- Stop dropping third_party/zlib/contrib/, which is just source code
with acceptable licenses.
- Replace the rule that dropped third_party/depot_tools with a more
specific rule that drops just the ninja binaries. Also delete some
unused png files to work around a bug in our scripts.
- Replace a rule that dropped third_party/devtools-frontend/src/test
with just dropping all wasm files ('*.wasm'), as well as
third_party/devtools-frontend/src/test/screenshots/image_diff/.
* debian/patches:
- disable/swiftshader-2.patch - drop most of it that's wrapped in a
check for windows.
- disable/fuzzers.patch - drop it; with the last release modifying
fuzzer inclusion, we can now configure the build without this.
- disable/owners.patch - drop it; no longer needed with depot_tools
remaining in the source tree.
- disable/devtools-unittests.patch - drop it; no longer needed if
we keep third_party/devtools-frontend/src/test in the source tree.
- disable/tests.patch - drop half of it; the media/gpu changes aren't
needed, while keeping stuff in third_party/devtools-frontend/src/test
from building is still necessary.
* Drop enable_nacl_nonsfi=false from debian/rules, as upstream got rid
of the variable.
* New upstream security release.
- CVE-2022-1232: Type Confusion in V8.
Reported by Sergei Glazunov of Google Project Zero.
Checksums-Sha1:
b2f3997b024f088a24d4af0724e959aa72f29c84 3689 chromium_100.0.4896.75-1~deb11u1.dsc
3a25b66e5dbf9036bc69cf64fe26199c47df304f 588854276 chromium_100.0.4896.75.orig.tar.xz
570218c9afff2f0af1a94d6e46516b11affe23de 207940 chromium_100.0.4896.75-1~deb11u1.debian.tar.xz
1477bca5fc6ecf6da86ef5b7d8a9e422a878c6bd 20616 chromium_100.0.4896.75-1~deb11u1_source.buildinfo
Checksums-Sha256:
4adc2bc5fd5251516140938254e5ccef8e99af2fa1a3aa56758fb3d99b7a64c4 3689 chromium_100.0.4896.75-1~deb11u1.dsc
a7b98e52b9d01ab75b88ba579d8ecb318f6d666d90e3e33a832bce3c51d8ea20 588854276 chromium_100.0.4896.75.orig.tar.xz
271b667829031a94693a7f1f546984b2e8646350d3791f73873e651bfc8d1c64 207940 chromium_100.0.4896.75-1~deb11u1.debian.tar.xz
8405ea111f532f2c254547e4612f74a0b382aaacb812a60362d1063138158878 20616 chromium_100.0.4896.75-1~deb11u1_source.buildinfo
Files:
5bb7b68ab1187be9bc625b219302348d 3689 web optional chromium_100.0.4896.75-1~deb11u1.dsc
d2af372f59014cb4b6a3c0a2875f0bdd 588854276 web optional chromium_100.0.4896.75.orig.tar.xz
ba5a9a4ba94394da80b1cfdef75ae47d 207940 web optional chromium_100.0.4896.75-1~deb11u1.debian.tar.xz
a5e6609692ef43ff4f58e19acae270e8 20616 web optional chromium_100.0.4896.75-1~deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=gIHW
-----END PGP SIGNATURE-----
