-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 20 Feb 2025 00:16:49 -0500
Source: chromium
Architecture: source
Version: 133.0.6943.126-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (133.0.6943.126-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2025-0999: Heap buffer overflow in V8.
Reported by Seunghyun Lee (@0x10n).
- CVE-2025-1426: Heap buffer overflow in GPU.
Reported by un3xploitable && GF.
- CVE-2025-1006: Use after free in Network. Reported by Tal Keren, Sam
Agranat, Eran Rom, Edouard Bochin, Adam Hatsir of Palo Alto Networks.
* d/patches:
- fixes/bindgen-unsafe-op.patch: drop now that sid's bindgen is fixed.
Checksums-Sha1:
f335f0daa0a3b1065ac28ba7d05d82647d38e347 3734 chromium_133.0.6943.126-1.dsc
2b5ecb3b43b3b1c745212ef8d685166b8112e9c3 882609812 chromium_133.0.6943.126.orig.tar.xz
f276776f502ea06e733c691efb569de6d145afee 330932 chromium_133.0.6943.126-1.debian.tar.xz
a237b4854e6ce3390ce3176472ea85edbefd48fd 27291 chromium_133.0.6943.126-1_source.buildinfo
Checksums-Sha256:
982fc9b882ff238c77e56710be318564b3b9905c26e916dc638dce993675572b 3734 chromium_133.0.6943.126-1.dsc
08854ade31d6c28c58832aee8783cbfb119839939b6324955996efc57c3794ba 882609812 chromium_133.0.6943.126.orig.tar.xz
67a0759bc55008a31d3be9211d91b3d08128151624a8242f80323655a0afe0a0 330932 chromium_133.0.6943.126-1.debian.tar.xz
9eb07a7f78c321058e0500bd2aecce73eab2c3d069e8267b94ba93bcf9d5baa1 27291 chromium_133.0.6943.126-1_source.buildinfo
Files:
231e819bc91b37c1b12663e64a94bf1a 3734 web optional chromium_133.0.6943.126-1.dsc
d22c6edfb49e30ef278099d56ec576d1 882609812 web optional chromium_133.0.6943.126.orig.tar.xz
23a573c8c5ee0746d74e5895a3ac66e3 330932 web optional chromium_133.0.6943.126-1.debian.tar.xz
bb2dab9f39f1873df9b351b4ba1189ec 27291 web optional chromium_133.0.6943.126-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=6HkC
-----END PGP SIGNATURE-----
