-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 18 Jun 2024 15:55:14 -0400 Source: chromium Architecture: source Version: 126.0.6478.114-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (126.0.6478.114-1) unstable; urgency=high . * New upstream security release. - CVE-2024-6100: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) participating in SSD Secure Disclosure's TyphoonPWN 2024. - CVE-2024-6101: Inappropriate implementation in WebAssembly. Reported by @ginggilBesel. - CVE-2024-6102: Out of bounds memory access in Dawn. Reported by wgslfuzz. - CVE-2024-6103: Use after free in Dawn. Reported by wgslfuzz. Checksums-Sha1: fa05cdafca5cea7678dae37b05984eb6545ec346 3766 chromium_126.0.6478.114-1.dsc bec8685108dfbecdd69e9292579919e225de86b3 963643200 chromium_126.0.6478.114.orig.tar.xz 6b573b268fab36bc302cdce4c03f089b9c8325ed 429820 chromium_126.0.6478.114-1.debian.tar.xz eb3430cd7f83e43e3c1cd7feee5f26fbf997e210 22116 chromium_126.0.6478.114-1_source.buildinfo Checksums-Sha256: 870c1ada1bfdb589da17bb85c7fa7df21fd64b06f10bd40aaa5671877bf2bc15 3766 chromium_126.0.6478.114-1.dsc ea423605a0087d7e868ab295ef7279eea6b47d10591e3e96af421946efe05071 963643200 chromium_126.0.6478.114.orig.tar.xz e2e331926ae11e3f4b64b8f4bf2ff19a7a9bfe79640217da308a0385f4b92695 429820 chromium_126.0.6478.114-1.debian.tar.xz 38c19729f6b7501e955440d49861167b7ed8453f77f4621342558008c9853a8f 22116 chromium_126.0.6478.114-1_source.buildinfo Files: cd3ebbf7382664f8110f8e8294f417bc 3766 web optional chromium_126.0.6478.114-1.dsc a8814835c827e7782c7eccc304401412 963643200 web optional chromium_126.0.6478.114.orig.tar.xz 621d21a5d6ff86a545b64dcb792c6b71 429820 web optional chromium_126.0.6478.114-1.debian.tar.xz 125c7f354fac9f4fd97cf2a6a946a2fe 22116 web optional chromium_126.0.6478.114-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmZyU1oUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjfZDw//XgkCrdoBcswowj7pMmBOwCC0cqcC 5LS9AcP35ND4LpLhfvDj6sojey6i72Pbki8YT1rf/ZaLDyRsIVjv7pNQBpVF7MOg vNX6W9JXEjdko4P9fBkU7OVsbo1sjs5Bh9GQ6HMJojpqBtnU/C0GSA+3h0o41X6v 8RHOwW90yN6qKAH9HbxjYt4CxbspMznfaxzDlOWbH6+ejyBQbekVspT/5WmmmaKJ eh/tmGMnbyhhpzBHKw/TS4vM1NLmUKYlDEH1JKABptvq+4/DgcofMexUipZpyuI4 Oqqd66g2fhd2Ve/7lv2jSxGdrb6CMGRrXjw9xZIgz/Tpp426yiV5XKOOHQMtCh2o 8/gu5Fk4+1JeglFS1J/bH0X+wF1m2C96ePVV3Aw9cQUjBC21T9Y0znHkdU+hBfdW tGa5E+iOhLMC/1/QZre+KIspGMk1B+yip26b7hOOVtQwblVrtoodKSkHZfkK/aeR MJjtC1imgMDY24LLJ2Nz/PXOcf8AO4VKEFf2OY68sqacyziQJyaYN7F7f9Cvp4G3 sbnZMShzK9n2rPHKApMuKDuPUyiTSFd/yxLBPvmvn7V0Wqo+KRhy321CzgTqN6a0 5jKceO2Y785GsuJM7LwJ6ShpADh9eLQWVQkHnuCaj6NPCvFYRvWSOSQwAC0O3ixA fpkmuwVmcJ+xwjU= =4iJT -----END PGP SIGNATURE-----