-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 29 Oct 2024 20:36:38 -0400 Source: chromium Architecture: source Version: 130.0.6723.91-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (130.0.6723.91-1) unstable; urgency=high . * New upstream security release. - CVE-2024-10487: Out of bounds write in Dawn. Reported by Apple Security Engineering and Architecture (SEAR). - CVE-2024-10488: Use after free in WebRTC. Reported by Cassidy Kim(@cassidy6564). Checksums-Sha1: 2ed0ee8cb5aaadccac181b074ea3e7f5978b33ed 3773 chromium_130.0.6723.91-1.dsc 0bce108fd3f9e9f1c3f28e65c19178ac0405708d 814883852 chromium_130.0.6723.91.orig.tar.xz 32c607fd4d9da9950d22007f6e1bd2f4998ca73b 417104 chromium_130.0.6723.91-1.debian.tar.xz e60d2df86f0a0de83645c583c58dd0f5faf86fae 22951 chromium_130.0.6723.91-1_source.buildinfo Checksums-Sha256: 0b3dd2321cb8d2cb95dd818aa7f45ce727ed6d531b4a1d4b6e760650b7020054 3773 chromium_130.0.6723.91-1.dsc 0f828b6a6469289c5f3efe2479389357e83e7730b9585c00ff8585e21033dcb7 814883852 chromium_130.0.6723.91.orig.tar.xz 1a5fa2be93d5fcbf1ca228ef0b7c521361fbe048889658c3bd0a87a9f959b8d4 417104 chromium_130.0.6723.91-1.debian.tar.xz 4af9957b9eee9e0e9d7c87c0b64f83f54489d63621b93c8157b339dbd2fb0173 22951 chromium_130.0.6723.91-1_source.buildinfo Files: f715d4bae21306b4ac5fda62c768d65d 3773 web optional chromium_130.0.6723.91-1.dsc ca0859ca2e98029474676d597660b748 814883852 web optional chromium_130.0.6723.91.orig.tar.xz 1538553f0a2596e555e447c60df2d6dc 417104 web optional chromium_130.0.6723.91-1.debian.tar.xz 1cab25a4bf3c22eb378d50542d67d625 22951 web optional chromium_130.0.6723.91-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmcmef0UHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjfAJRAApX55aRG0Ji8DMqfHd1J3+YR8vtsn hguFiwdBWtRUK1aE4fGljVs+dIMtqZj1BMA/PDFgqOuUgspiBg8xeSE4CUF3EUU/ gu9RSKUMEf0A9F2++G+/5JyyibBya9TFNmzVFHx800uhr4zVTObCrzCU+qFVf/Un fgWcJjm57fs+3BQJ/QeRBLi2VUe1x7fN4tWDMWzQQj+iTNbTDuQ1TjfvmtFQkwWG RlCgrlEuhmkUqkOk2j4PR8NWpOazbjhgOmuiCf2wnriK71amLUOFITf/fdvJSwPN YgnbIVUvqBSL3jinWLJWyt/xlpNP1QqN9vYrF3rnlhwsKmygTsQj6x6LKPTMqB85 FF+/R2b9mYkspB6N1dLaDx/hBXTjGDBLwohoncsfy5uR1arniIrBgUVO2CzBnrK9 5iPg6mtUnDjCmJm9VlYqhQWGGGIH+mxkxb5RvL/QuIab4crceKBV+krK0cNRcIdL BwwdAQqgOD5992/x8HLjA2hSoCLUZn2HVisjSLASixFRAxAGE4uyXT/JEj1k4+9I Qk9yHGrQznfQkLqof5ba51iR7y/5evMGiKakKyi3665Xdgx81gaBnO7l7IeArN2e 6F+b9u5E5HjuF7aE37VtP1O+0AhWO+dMgaEZwm3ebh3pk1/XJRU/EFfHbTP+lFX8 MbylcUkz/Zzeb0E= =X+Pr -----END PGP SIGNATURE-----