-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 May 2024 22:11:26 -0400 Source: chromium Binary: chromium-l10n Architecture: all Version: 125.0.6422.141-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (125.0.6422.141-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-5493: Heap buffer overflow in WebRTC. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5494: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5495: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5496: Use after free in Media Session. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5497: Out of bounds memory access in Keyboard Inputs. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2024-5498: Use after free in Presentation API. - CVE-2024-5499: Out of bounds write in Streams API. * d/patches/fixes/libxml-parseerr.patch: move to bookworm directory. * d/control: add versioned build-dep on libxml2-dev < 2.10. Checksums-Sha1: 5f196c3e66a9984620e8a66e6d35f34c2c800a94 7127360 chromium-l10n_125.0.6422.141-1~deb12u1_all.deb fe6488ae0b0d8ac9830b160a2a65299e57a96dc4 21996 chromium_125.0.6422.141-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 94686d79b71df4b1086f02a66e58d41dfb07c143c1cbd02d14cc0c9cfe282dfd 7127360 chromium-l10n_125.0.6422.141-1~deb12u1_all.deb 990722fe65270345745f857af4669ef99d508ffe659533b324cfd017f2a3b880 21996 chromium_125.0.6422.141-1~deb12u1_all-buildd.buildinfo Files: 93bcd69a10c4780c3858d68bb7231444 7127360 localization optional chromium-l10n_125.0.6422.141-1~deb12u1_all.deb 68221f3feece2c8f5cad51fdf9c878c1 21996 web optional chromium_125.0.6422.141-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzcbx6nIE/ydHa1FFigL77i1GSVkFAmZZ1cYACgkQigL77i1G SVmu+w/8DGsJ0yYmn3jQczwqD0moYvCv2BaIoNEY0oIzdWsPZ76HRikxOQu316m3 D0g+j68Abol5PlNu5umnO0rLQc3+w2Sjmug4zoa0YHn1UBb6p8UAOuM6qPdLI6S8 IdZBzhZaiFpTSwOIwbEdcGudSnMw/VQOsryj5MuGhky18dFUpXeMV+vweMLwCZs3 8jIaXaMh7bcw2mIA+WEr8o8xKaamvJzk3gIKU8IE/0Re3YfRKaeD2oLLIS6YAfpT XWPgeLl8qYhrPTShVuwZYkBjs92BzUWyDtgZck0eJiydMJyHaEt7lZLog4lNZ6JO ImzFjUhsGjexNWOkKyVz0DJIG55/NWSTMKimMM+t/NnEz3bghTeIQJZDDAkcFARP 8sXWQuQcBtM2eb5l+f1Fprid70RmsL0gN9LakinRfrgiLqaWeMr1r1XABXUO4zoU fuCMsGq3VvhzbT9N+dZBfPm6jz00nvridLlw/lRE2lq5NgHsCpIzbbWDwT33GTfo AOw2KG0s2k/Wc0LQHIeSVOEsOKRqBIkUhQMfQS9IcdwUUD0O/KCCzXdQXJ5tcdvO lHjFJhqV1/Yds70rH+jTBmqv/C0h24w8SRsxsQ+MlQVk/DVYLGfrOJf3FCpabyhe 79WbHx6L4B4lU/YIHvbcgnaUupkED9jK5e7EOheR0ROupGHNKdw= =DbOX -----END PGP SIGNATURE-----