-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 18 Dec 2024 16:52:56 -0500 Source: chromium Architecture: source Version: 131.0.6778.204-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Changes: chromium (131.0.6778.204-1) unstable; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2024-12692: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n). - CVE-2024-12693: Out of bounds memory access in V8. Reported by 303f06e3. - CVE-2024-12694: Use after free in Compositing. Reported by Anonymous. - CVE-2024-12695: Out of bounds write in V8. Reported by 303f06e3. * d/patches/fixes/absl-optional.patch: comment out __glibcxx_assert() that we keep hitting with gcc 12; it was previously commented out, but we lost the change when we switched from libstdc++ and then back. . [ Bo Yu ] * Build swiftshader with llvm-16 instead of llvm-10. Checksums-Sha1: 96c1a35130eef4de0eb87eaf030a91e3d8b19503 3747 chromium_131.0.6778.204-1.dsc 394e8f36aa7f35e33e9c9df95ee66aadd31c7ca3 772662440 chromium_131.0.6778.204.orig.tar.xz 0ebe8dd86584b30a7028fdd8eabba715c2a0471e 427476 chromium_131.0.6778.204-1.debian.tar.xz 46a7d268411fa07324e7e9e512e86c465775f744 23121 chromium_131.0.6778.204-1_source.buildinfo Checksums-Sha256: bb23cb5c88bc91f1e2460579ab512909c4fc007297b879a75c8cbf355c4f5cb1 3747 chromium_131.0.6778.204-1.dsc 02c5020a17e0264bda795ae624d6482a3e03a7425fa2e440ff3fba75b91f5621 772662440 chromium_131.0.6778.204.orig.tar.xz e8c01066129afd4fde45c6c97fd5b3fc3e8230ff2f93ddc3c04f375812c313b8 427476 chromium_131.0.6778.204-1.debian.tar.xz 1b328e3c1b1ccb2afa87445b521345dd8b808dac7a40dc2d00a4e432c4b36bd4 23121 chromium_131.0.6778.204-1_source.buildinfo Files: dc7c0174e0aa4d6ce446edc98e2d0da7 3747 web optional chromium_131.0.6778.204-1.dsc 8045a21eea1a3f791c372a70672a75ef 772662440 web optional chromium_131.0.6778.204.orig.tar.xz f3e287ccd0514e96fb19166364e977a3 427476 web optional chromium_131.0.6778.204-1.debian.tar.xz 88d4c9167810c354fddc7d68974d7c67 23121 web optional chromium_131.0.6778.204-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmdj2SYUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjd4vA//fBMj0qXmDP5/zaN+8CzeZ+/CY1I2 4rR/s/eWDJ6vjpl6eZCOV3eq4atlwytlhElo4gmyPz2VTXEntmqIBNM7SjX13BfD u2lWT0YMSJ8lq1Y3ttpm7QhJ026a+u3sdOsEy551aH7D49cK268A95m8OKUpVlYs qFgjvN9yor8hx49xmvEUjPrMijZAV/+vMYWN6uXiCgEUUTdNIHa4qtvzU4qXmAea u/NERHx6EvPZUnCi2K03L8JSpBFRggWTnBodLeisvi6iQBHLaZI6OvdS1yFdZcXJ tWQy+Pv6Fxj2jc/m5wcIVoycHW1GLUYMpiGtx7r9SkM89WykpmCTQ5uyUxPt8lVD zayTeuBImd1TpHRyQcr1KzlFoQVqKfo+CWXGmICqUXYqwNm26A7Uez6jk4xwJHAS eHIW9uODxlb1Ak3KDmGTKFgNBDMHhnYfIvKcqlJnufCEPdmYJEfEhhBwVey+9jgC utOn5cr1IeeH7SsWsuMEzbJvLrjnVQk1vT73ackmuMti1Mdo9B6BdMBKRA0Gy8XH twAW7BlqKirM7f4lcVgpdJAZtKBqTgV9ntzCX3jajuALxNd0iI0wASFKC0okkdld o+jPSH06EEOxwkJLY4NfbICdNQGrGWZw02Ur+hRw81YJqVifMjL6KgDVQ5Xiw4s9 G/1/E8auUceJv9I= =38Ou -----END PGP SIGNATURE-----