-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 May 2024 22:11:26 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 125.0.6422.141-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (125.0.6422.141-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-5493: Heap buffer overflow in WebRTC. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5494: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5495: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5496: Use after free in Media Session. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5497: Out of bounds memory access in Keyboard Inputs. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2024-5498: Use after free in Presentation API. - CVE-2024-5499: Out of bounds write in Streams API. * d/patches/fixes/libxml-parseerr.patch: move to bookworm directory. * d/control: add versioned build-dep on libxml2-dev < 2.10. Checksums-Sha1: 06824f5802320a36b95d9c4a76f1a03fc822abb3 1291960 chromium-common-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 313dc41a325df273d86ed7c874ba10c3941208b8 4873476 chromium-common_125.0.6422.141-1~deb12u1_arm64.deb cc295d4f9876adbf08cd2de7afd9fb8f1c42efce 36584140 chromium-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 45bb381bcfc180c61279641c56b7dbdd9ee7dbac 5620316 chromium-driver_125.0.6422.141-1~deb12u1_arm64.deb b93810c202a3ce74acb484f997e21dac816db764 14472 chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 88431f37200fb2c9c1f6857fd677acb5029ed5b9 90360 chromium-sandbox_125.0.6422.141-1~deb12u1_arm64.deb 518f0833170be02606dc3461b04a218fd0dc1291 31074036 chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 626ac1e402b2ecf5d8290a816153e105ab7b1a97 46698088 chromium-shell_125.0.6422.141-1~deb12u1_arm64.deb 0595b068e57584467b8af166f3e4e663a20a6690 24730 chromium_125.0.6422.141-1~deb12u1_arm64-buildd.buildinfo 4c2015b5227e677984b4fb71e709f55b64c60879 66819184 chromium_125.0.6422.141-1~deb12u1_arm64.deb Checksums-Sha256: eb5d802f7c1919055a87ce09c0db6f2bf67fc831c153e55bf3991ce1ab2064d8 1291960 chromium-common-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 1a83b3b5c98da20f8e3d841b169e0b556844227d1624358256965bce2f9b8f99 4873476 chromium-common_125.0.6422.141-1~deb12u1_arm64.deb 9df15f4c545dc4e61166e2fde4204ac8039137d904c7e0766fff45a03f86e512 36584140 chromium-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb f7dd1ec880fe59d1f7f958b811c1f598f51c558c4a322afea1e4700614728f29 5620316 chromium-driver_125.0.6422.141-1~deb12u1_arm64.deb 7bdb90d1487473ba8ebbd123ea7105bf73b0b921d1008be69f95d307093bca80 14472 chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 840a971c76c13fac355dfd730f59d6515ebb8556d73138eb8cb4d5816c6124b9 90360 chromium-sandbox_125.0.6422.141-1~deb12u1_arm64.deb 8142eb6508fcdd4897c062864efc37d6c2ecbca6b6c8adb1bef60c0fd8d53008 31074036 chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb e8875c57a81b8ef4d20a66b738c9ede8a3a7abfde91a2f92a8a94d91a9489508 46698088 chromium-shell_125.0.6422.141-1~deb12u1_arm64.deb 91d4cb91b334daed97920b34044f93dfdcf1d1aed4950d4228eee0169deae4ba 24730 chromium_125.0.6422.141-1~deb12u1_arm64-buildd.buildinfo f58779f9654ee61755513f3007d37a035d7bd50c5c8016307811f0ae163c7f3a 66819184 chromium_125.0.6422.141-1~deb12u1_arm64.deb Files: 2e84ee63cae26e0f4110c385c4cb21b4 1291960 debug optional chromium-common-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 7b4f1c6d3d4bf68f2fe2d21f1842cf40 4873476 web optional chromium-common_125.0.6422.141-1~deb12u1_arm64.deb 31613b148667a573a2162679aba517f8 36584140 debug optional chromium-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb fcf3a117affc0364c0c07ab143b33d54 5620316 web optional chromium-driver_125.0.6422.141-1~deb12u1_arm64.deb 54ba0e7ac2a5321d1236861f718ea2cf 14472 debug optional chromium-sandbox-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 67957e707dc5d01cbd18a5dfdcf9084d 90360 web optional chromium-sandbox_125.0.6422.141-1~deb12u1_arm64.deb 9cab6afd8b4312b6eb4aa23fadfd24df 31074036 debug optional chromium-shell-dbgsym_125.0.6422.141-1~deb12u1_arm64.deb 8d97e9c5ce6b00b258454bfe3626f92d 46698088 web optional chromium-shell_125.0.6422.141-1~deb12u1_arm64.deb 8bec41888dbba77da9cd6ba5fbc0b6cb 24730 web optional chromium_125.0.6422.141-1~deb12u1_arm64-buildd.buildinfo ade58669838e6af199b660c904b93cec 66819184 web optional chromium_125.0.6422.141-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEU81tY/BC8e+eAeWhLffeOnPnbLUFAmZZ+64ACgkQLffeOnPn bLUMiBAArRtXK4xjXJrzsOkFH8K3M1XCm4lWdWv2T88ZrYk1UjGsQRDGRjpPx/bD wIgMK2AZPeXP4Vp3NgsyaScvA21SHQdNd7gG8j9B+HQVHznRxaPUwHeMMHRcNv9O IkmMOYC886jS6J9Aanwp0fHBihF6lLbQHMaXMoXY/UdM5x00W9QwdwwSSynsh/vh fOvzS0bmAUZW5pO3c+9VqBFDGrwlw26ds/5Jz89NZFzYZl/geyo1T2Q1ynqhhwm1 uPPdohOCo6Vb6veolUL0qQuDdkaYMlJhqCY5IeoxBdELm2V12CO4NyDOZxSALEPU TpGxCgn9ebKJws8txMD8sPu2lnSwUND6oNLak0ao5XYxaN5nXoLtreBw3N8mzrZB vAXV4+dBItteJgH8Ax7AXT696YV+StYBb7m1507eAWxVzhKIvSGUWqA5/n46c4B1 LvTv79kywewDlIxYgOwSkUqHrjuMNBx4LGsIL/8tRt2FgMNNojHkDcFkuZnEdaSq vOfyF+KY+5KNL3TUAsm9uXWwo4MCT9P0O7qAPV8yCCVfST0aaxtGHvLoWrCVJjMH hQ3TltSsSPpP4fXNwUdZEww7dY+r219uLcQ8UCXe6MUFtqLSxc2dopd2hEP7Q2l8 RkTQEqTFvBxBnKKdoEiTLXVzXe0xDuLNHj2AlO7BHmpoFqRenrc= =xcHd -----END PGP SIGNATURE-----