-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 21 Feb 2024 19:56:32 -0500
Source: chromium
Architecture: source
Version: 122.0.6261.57-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (122.0.6261.57-1~deb12u1) bookworm-security; urgency=high
.
* New upstream stable release.
- CVE-2024-1669: Out of bounds memory access in Blink.
Reported by Anonymous.
- CVE-2024-1670: Use after free in Mojo.
Reported by Cassidy Kim(@cassidy6564).
- CVE-2024-1671: Inappropriate implementation in Site Isolation.
Reported by Harry Chen.
- CVE-2024-1672: Inappropriate implementation in Content Security Policy.
Reported by Georg Felber (TU Wien) & Marco Squarcina (TU Wien).
- CVE-2024-1673: Use after free in Accessibility.
Reported by Weipeng Jiang (@Krace) of VRI.
- CVE-2024-1674: Inappropriate implementation in Navigation.
Reported by David Erceg.
- CVE-2024-1675: Insufficient policy enforcement in Download.
Reported by Bartłomiej Wacko.
- CVE-2024-1676: Inappropriate implementation in Navigation.
Reported by Khalil Zhani.
* d/patches:
- fixes/v8-compressed-ptrs.patch: drop, merged upstream.
- fixes/stdint.patch: drop, merged upstream.
- upstream/vector.patch: drop, merged upstream.
- upstream/display-header.patch: drop, merged upstream.
- upstream/bitset.patch: drop, merged upstream.
- upstream/once_flag.patch: drop, merged upstream.
- fixes/std-to-address.patch: refresh.
- disable/signin.patch: refresh.
- disable/catapult.patch: refresh.
- bookworm/clang16.patch: refresh, and change
-Wno-c++11-narrowing-const-reference to -Wno-c++11-narrowing.
- bookworm/nvt.patch: refresh.
- ungoogled/disable-privacy-sandbox.patch: update from ungoogled-chromium.
- bookworm/undo-internal-alloc.patch: revert a commit that confuses
clang16 w/ libstdc++. We need a better workaround than this.
- upstream/mojo.patch: update from git.
- bookworm/constexpr-equality.patch: add a few more build fixes
(constexpr removals).
- upstream/uniqptr.patch: add missing include.
- upstream/optional.patch: add missing include.
- upstream/bookmarknode.patch: add comparison equality fix pulled from
upstream.
- fixes/optional.patch: add missing includes.
- bookworm/nvt2.patch: revert another upstream c++-20 change for clang-16.
- upstream/bitset.patch: add missing include.
- ppc64le/v8/0002-Add-ppc64-trap-instructions.patch: refresh.
- bookworm/eraseif0.patch: revert another commit; needed by
eraseif-lambda.patch.
- bookworm/eraseif-lamba.patch: refresh.
- bookworm/undo-rust-req.patch: refresh.
- bookworm/bubble-contents.patch: remove static_assert() that fails with
libstdc++12.
.
[ Timothy Pearson ]
* d/patches/ppc64le:
- 0001-Properly-detect-little-endian-PPC64-systems.patch: drop, upstream
fix in GIT hash 25a6e6
- 0001-Add-PPC64-support-for-boringssl.patch: refresh for upstream changes
- 0002-third_party-libvpx-Remove-bad-ppc64-config.patch: refresh for
upstream changes
- skia-vsx-instructions.patch: refresh for upstream changes
Checksums-Sha1:
15e068b9f406b52cad390456991a4eedcbd52ef1 3731 chromium_122.0.6261.57-1~deb12u1.dsc
32482d17a4860bd475a5d87965384d783307de86 831688880 chromium_122.0.6261.57.orig.tar.xz
8222e0f9442a28abd869c130be8ac5b93fb60bbd 383192 chromium_122.0.6261.57-1~deb12u1.debian.tar.xz
b7a81fcc2a3ab5d9e56151d386a5fe7c6d5e39af 21604 chromium_122.0.6261.57-1~deb12u1_source.buildinfo
Checksums-Sha256:
c1215799b8b78871763696652e5791171b8a095207e16be28f8a0e468bef4404 3731 chromium_122.0.6261.57-1~deb12u1.dsc
0a01105fa3ab5cf3c9645cbf5c508cf4792c463a4e8d6d0c76272c720fd7e9fb 831688880 chromium_122.0.6261.57.orig.tar.xz
f1a7b3914de1fbb3f8a638f540ffd70d157a620668c40750fe82338d6f2a55ea 383192 chromium_122.0.6261.57-1~deb12u1.debian.tar.xz
b7aa84b79185b81126fc159e0624ed7ba86e90953c178bcb68da6e31bcc39e4d 21604 chromium_122.0.6261.57-1~deb12u1_source.buildinfo
Files:
6d35105844fd8ab1bcc16655ac5fd823 3731 web optional chromium_122.0.6261.57-1~deb12u1.dsc
6b1882ff077efc3f919ffe4519d7f997 831688880 web optional chromium_122.0.6261.57.orig.tar.xz
6cfcee0ca84ca774e40ab467242cfa4c 383192 web optional chromium_122.0.6261.57-1~deb12u1.debian.tar.xz
96e3ea1111a4ba243fc4c3bcc9a41f99 21604 web optional chromium_122.0.6261.57-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=M9Eh
-----END PGP SIGNATURE-----
