-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 10 Jul 2022 12:44:03 -0400 Source: chromium Architecture: source Version: 103.0.5060.114-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (103.0.5060.114-1) unstable; urgency=high . * New upstream security release. - CVE-2022-2294: Heap buffer overflow in WebRTC. Reported by Jan Vojtesek from the Avast Threat Intelligence team - CVE-2022-2295: Type Confusion in V8. Reported by avaue and Buff3tts at S.S.L. - CVE-2022-2296: Use after free in Chrome OS Shell. Reported by Khalil Zhani Checksums-Sha1: 5a85c14d48dc3aae21bf8dbe220b6f272f783ee5 3626 chromium_103.0.5060.114-1.dsc fba105aa14b42321cac16ad1ceb1f7d12728a16b 608262644 chromium_103.0.5060.114.orig.tar.xz 4cd1e5de7261c63fb1aad0ec6b767545f1720f4e 209340 chromium_103.0.5060.114-1.debian.tar.xz 2f3c3669447bd0ae7b461862233aadad56676fba 20139 chromium_103.0.5060.114-1_source.buildinfo Checksums-Sha256: a32fb570272771f93bae0d061cb9ca26700fef56b5c236e48f8de86457ba6ffd 3626 chromium_103.0.5060.114-1.dsc 52cc3e101ac9f949ed235d2407d1436b8eabaa03fea5341da911509ce7f7a24b 608262644 chromium_103.0.5060.114.orig.tar.xz f537658e2934d7b47273181ef656ec3153d7a465b25ac4c7eedb1f6df6167936 209340 chromium_103.0.5060.114-1.debian.tar.xz 47da6f64c458596fa20b3afd2616e42613ccb8cdaa1aef625952bc9ae354883c 20139 chromium_103.0.5060.114-1_source.buildinfo Files: 268d495002ff3ce59be685fc26287778 3626 web optional chromium_103.0.5060.114-1.dsc e1fbc2a9b176da2312d7ab60372dbb3d 608262644 web optional chromium_103.0.5060.114.orig.tar.xz e2723abb9741adaaacc5f7f8b60ba744 209340 web optional chromium_103.0.5060.114-1.debian.tar.xz 132bcce590f4c439b1ec28cb7c1c2b6a 20139 web optional chromium_103.0.5060.114-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmLLTHEUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeTExAApVGqLCZlordxTAk7XG4XwT13L/sy 03YeCfJHxjBNXkxqVf35zXygpQNlBNrce2Ai74v3YzUOmxZg6WaP+AJcPYamyw0P rZf8sp0RW7nBqz88iHuYVlc1G5bS8WzsoeIqCapF8w0/O+n9KQx0ArJofxRAO8nS f9zqxluRaK/H7aI04mEOR53wBEOcaWiCkkElw3W88CeMrUSinK4VhYvYQpTxOWfL 9M4YbiNnVvHE2qkwNa0dWbEX/Hu3Y4Rmh6F4+E7+patAIwgPZtYFnATJO7A4Qgxx PUJYhYkjnNFnlSu5IfXz6kgxJsVeF5IiuPew7C90efEVUEtj3N9TiEUm4it6w0bo b4vrNv3u974pZWcuRMrGH2dEvNxUJmgIRRfHx7fZKLXKost622iSzygZKALQwx/e ZvKZcnAiMMKSPYdsL6tzt9siF/QDcimJT6mll3sglK94bDkYZmWGuyCxpRfnUA54 H9CijOQF6WTc7G3KIpyP1eg5GMGaZlGwYROwR5ohhyfQnI9BrhZMdgH5O52Fxi5m lr+B+6Iso6Fmm8n3EF/5h8PTVaRg7csV69z2idOM5Nau1rS9/tMwpOgJtClsyAah xSo8lDSN1Ny6dwHehwtW48/Br7XvHRm5VkPiQ0KT2JCW6f8JVKaR1yxv3w9ZLHyM GIxmQznqrGHuRs4= =YMLd -----END PGP SIGNATURE-----