-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 03 Jan 2024 22:53:21 -0500 Source: chromium Architecture: source Version: 120.0.6099.199-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (120.0.6099.199-1) unstable; urgency=high . * New upstream security release. - CVE-2024-0222: Use after free in ANGLE. Reported by Toan (suto) Pham of Qrious Secure. - CVE-2024-0223: Heap buffer overflow in ANGLE. Reported by Toan (suto) Pham and Tri Dang of Qrious Secure. - CVE-2024-0224: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab. - CVE-2024-0225: Use after free in WebGPU. Reported by Anonymous. Checksums-Sha1: 926b46dbf1dd0a7aab990c6afb4366c96ef4c4d8 3706 chromium_120.0.6099.199-1.dsc 159d46baae0340e9a22082d54a78444749a7815f 792002344 chromium_120.0.6099.199.orig.tar.xz e2ec739c45a879de9dcab9e90c61fbde0fea9020 369180 chromium_120.0.6099.199-1.debian.tar.xz 2bc66b22bf7cde11fe58400c7c6d3a700735a6a1 21206 chromium_120.0.6099.199-1_source.buildinfo Checksums-Sha256: b1ee5369ac1db320c920ca9bd64db9f0ee644b5a04dd706b0d2f8c3fda0da372 3706 chromium_120.0.6099.199-1.dsc b65867b386c825fc62b24dce4b997ef2428ea6cfca9c94b175b3d71b3196e312 792002344 chromium_120.0.6099.199.orig.tar.xz 7502347ee5dda5444edc69da535b0807de82e065fdbff8bf8c7f6fe739e017b3 369180 chromium_120.0.6099.199-1.debian.tar.xz b766b7e32a1695595a173e3574f94c51abf5af497c4532d7ca79d02953d14b3b 21206 chromium_120.0.6099.199-1_source.buildinfo Files: e489e541b666aa69632fd6a056a11953 3706 web optional chromium_120.0.6099.199-1.dsc 7f1ae6ef42268ecea7b0ec5a2178c4f3 792002344 web optional chromium_120.0.6099.199.orig.tar.xz 0727d4c8fdd9c56bd753ed436f30d86b 369180 web optional chromium_120.0.6099.199-1.debian.tar.xz a9113d5aa4e1a7012fbabf6d7b58c0ae 21206 web optional chromium_120.0.6099.199-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmWWeSkUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjdYyQ//fIChFILHDpv6Q4ow41gblmiL/vhL RZvtBTclCoZWdg2lFnCNy5OxrzskjBdmJwMy2LIffB4uCYvaaMS0izxm9hfVkyrz v/rZxTgnEM6ApQdqXZYD1YVfuyDoo/1Kq/d6JOPpG+lIUy+ptFFLJXYMIDaUuQiR xdGERjRyodxlk1DBAHC+mzphLwjFZYmYeCA1T/PU0TWkOgEEpHwuSQyeSp8m1ekE zPFiKhW2w4kDG2KyqkKbvr+w5Q6LMxiRe06kTf/7dURrxGdNuPxJgEM3DJEueD57 E7UMI2vMri0TtkDY6rIpoch3R2HXdfwvqv7E+/PPlwofdKGhZP4RYRe9A1Zp54q6 YDhuOj3Cx0jBSc3LHRtddvoPaHuG6AnKN6E+9gaRvjrYywhQaq2PKQlgDwKBOnPl w4dqZglSbByKcOEFETENgNpMp/Mn+KMgsm77qvvl/II/x7Np4Wa1XW7UH92CfICh p+kHKmHTbmg7bjLb0JvTrI3pIFTEqhNdJCReWFR/vjplC5AU9jBZWdU1DgJyi/rE anJwpM5BfOEnmByCmXSkJ4IRm2vi18veISF/+3JFh7meq8na5iXq7Rzj8tA/Xy0i oXarMAwYP8oU0UksQfLY5dQU284hZh02njTDlUgObtMukEDL/ej9rEOYJEK7sKXK ZtTUpR6slHzrXdY= =doim -----END PGP SIGNATURE-----