-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Sep 2024 15:23:27 -0400 Source: chromium Architecture: source Version: 129.0.6668.70-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (129.0.6668.70-1) unstable; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2024-9120: Use after free in Dawn. Reported by Anonymous. - CVE-2024-9121: Inappropriate implementation in V8. Reported by Tashita Software Security. - CVE-2024-9122: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n). - CVE-2024-9123: Integer overflow in Skia. Reported by raven at KunLun lab. * d/copyright: delete more upstream .clang, .git, and android residue. . [ Timothy Pearson ] * d/patches: - fixes/predictor-denial-of-service.patch: Work around upstream issue #368562245, which can cause denial of service of the entire browser process on specific types of Web sites. Checksums-Sha1: b381f5fdaa7e91f26b4b9fdb355687ce2e4e5298 3760 chromium_129.0.6668.70-1.dsc e986412a154dd002a83d900737eb76e7d611f0f0 786382348 chromium_129.0.6668.70.orig.tar.xz c06891a654872229f7bb873190575d33105e7311 412660 chromium_129.0.6668.70-1.debian.tar.xz 65771ff75397c1d7416574ec89984ef432b69c78 23121 chromium_129.0.6668.70-1_source.buildinfo Checksums-Sha256: 0a1c0c6513c9b832ffa553a17f01b53cce28f3cc4a58f10ddeb9185e48678141 3760 chromium_129.0.6668.70-1.dsc 1e06dabd40126cab7f601c3b5f813e1b1a9b48095b21d58e512acdd9774b655f 786382348 chromium_129.0.6668.70.orig.tar.xz b8e94b6dfbd70daf35754d3dbb3dec3969cd65f99412f0abad42ef0622340d97 412660 chromium_129.0.6668.70-1.debian.tar.xz fd7d2c3f733eeff177572d865cdbfc6ad0b7dee365178917bebd2b9e9d7b5ef5 23121 chromium_129.0.6668.70-1_source.buildinfo Files: aed657d3970b85032e9c4b44cbe6218c 3760 web optional chromium_129.0.6668.70-1.dsc 2219b8294860a0af9a903b91a21de67c 786382348 web optional chromium_129.0.6668.70.orig.tar.xz aced6d7b24ab7ea0f8d5830609d32d08 412660 web optional chromium_129.0.6668.70-1.debian.tar.xz 4331edc4f50a4fc4f781ade1842f825f 23121 web optional chromium_129.0.6668.70-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmb0gFwUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjcUlQ//dTPAFsg+6JZJc0lyKq2LOcpIYNqs ItnY8secVA41TJYswaH0SM3izjmmliTRuF1WzvRCo3eaeuq4C4vqHGpRHxAUoVEw 1dxRinqKIC5hQg6go4DbMHXq8T6hAaIUaUn7xuADjb6bIZu+Y4sa6Tj2NRMc4A30 mGFvBI8hrw6YLaVYjgf5wYglpRKYWHwEDARpXalfya6QzX4X1ZOK31T7QwyyMrPd HjqzkO8SPCKBzkRjdBiiIZL4lOpD6lL35IXQZy96Hem9aX4pmdgqdSothsTF0P00 GHpaIr/6Bx9iaKa7PTGPvtPk8poz9kzg6f2BYXbNPma/kqFIB86i54rxvxd01mKv 73g8wjAkJfyGcWAp4jvUw0Wqm5JV29d1Dn+v5cmASFknjsd5Bi0yIy2C/eyxLn4t xlyA25I0Bc5gIe5feM0dMPSs446IqDbabBqQ3Yzm0WB6qrOGX1hBHPUv9ITRmoXX ssbRY6lCO8o3VXz2pBw+ZW85532gag+BFAV3CwWeLI+TQjC/PjZzlYaOTqfUMgpp MPPv+LE53f+7Q++OsAOS093VVEDr+MM+rIC7QOAkHLfpfg/hVAjj1mR1bssK/jv/ 7WT2Ou+E1rZCz4nfL5QoCPe+zjAFP3ixYixo/qL7TOKSgMOeCO6xYcLaJcGKHa8Y dJbjUVYQJChJgxA= =CPZa -----END PGP SIGNATURE-----