-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 16 May 2024 18:55:41 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 125.0.6422.60-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (125.0.6422.60-1~deb12u1) bookworm-security; urgency=high . * New upstream stable release. - CVE-2024-4947: Type Confusion in V8. Reported by Vasily Berdnikov (@vaber_b) and Boris Larin (@oct0xor) of Kaspersky. - CVE-2024-4948: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-4949: Use after free in V8. Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team. - CVE-2024-4950: Inappropriate implementation in Downloads. Reported by Shaheen Fazim. * d/copyright: fix instrumented_libs deletion; upstream renamed it. * d/scripts/unbundle: bundle new requirement absl_crc (which is unavailable in bookworm). * d/patches: - upstream/uint-includes.patch: drop,merged upstream. - upstream/fps-optional.patch: drop, merged upstream. - upstream/span-optional.patch: drop, merged upstream. - upstream/extractor-bitset.patch: drop, merged upstream. - upstream/atomic.patch: drop, merged upstream. - upstream/webgpu-optional.patch: drop, merged upstream. - disable/catapult.patch: refresh. - i386/angle-lockfree.patch: drop, I _think_ it's no longer needed. - upstream/ruy-include.patch: add header build fix. - upstream/vulkan-include.patch: add header build fix. - upstream/mojo-bindings-include.patch: add header build fix. - upstream/appservice-include.patch: add header build fix. - upstream/no-vector-consts.patch: add build fix; gnu libstdc++ doesn't allow const types inside vectors. - upstream/lens-include.patch: add header build fix. - bookworm/nvt2.patch: drop (replace with a better non-revert patch). - bookworm/v8-wrappable.patch: add nvt2.patch build fix replacement that just defines a single struct member. - upstream/ninja.patch: add build fix for failure triggered by ninja-1.12. - fixes/bad-font-gc00000.patch: add formatting patch revert to make other patches easier to apply. - fixes/bad-font-gc2.patch: add a build failure fix & refresh. - fixes/bad-font-gc11.patch: add a build failure fix & refresh. - bookworm/bubble-contents.patch: refresh. - bookworm/omnibox-constexpr.patch: add constexpr -> const build fix. - upstream/tabstrip-include.patch: add header build fix. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0001-Add-PPC64-support-for-boringssl.patch: Modify for upstream changes - third_party/0002-Add-PPC64-generated-files-for-boringssl.patch: Add pregenerated configuration for ppc64el support in BoringSSL - third_party/0002-third-party-boringssl-add-generated-files.patch: Rename to third_party/0002-Add-PPC64-generated-files-for-boringssl.patch - workarounds/HACK-debian-clang-disable-skia-musttail.patch: Refresh for upstream changes - third_party/skia-vsx-instructions.patch: Refresh for upstream changes - ffmpeg/0001-Add-support-for-ppc64.patch: Refresh for upstream changes Checksums-Sha1: 9eeb2c1bde5471979f7a9b75088d301bb1a35e78 1225928 chromium-common-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 04df3ebdb78ec360f288239189de0b6554156889 5015272 chromium-common_125.0.6422.60-1~deb12u1_amd64.deb f75062cdc18d40a4177ebd3f000d1b0658b392e1 35474108 chromium-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 1fe830597fe74a5c91b262a1c248d72dcf185af0 6204856 chromium-driver_125.0.6422.60-1~deb12u1_amd64.deb 80e922c2b7eae1d0a971f88e282826b77439ab88 14116 chromium-sandbox-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 018047a418efb42410f09ff9d1714727b141fe56 90228 chromium-sandbox_125.0.6422.60-1~deb12u1_amd64.deb c0bbc510f287752240d701a36a3d197ef3b40cf0 30843520 chromium-shell-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 541cb9e55c84eb80bf7112e541b4466af07f5b3e 52188264 chromium-shell_125.0.6422.60-1~deb12u1_amd64.deb a8585db016063f6e8c1d504990255be61e9128ba 24719 chromium_125.0.6422.60-1~deb12u1_amd64-buildd.buildinfo 28e098f36c136262a808588fbb47664d29a9a079 74471952 chromium_125.0.6422.60-1~deb12u1_amd64.deb Checksums-Sha256: 1c6d213ba147ce0f909da4e13909a4bcce75afc67ca8109a303eb41c8df5e37d 1225928 chromium-common-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 8af34386df6f50f2d216e848246362f14ed651ac15459bff813d6f9d2eda89d5 5015272 chromium-common_125.0.6422.60-1~deb12u1_amd64.deb 9108504061534eac37e85b1e5d48bc8e98529a5acd9b85e23bb228d79a179078 35474108 chromium-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 989af29c136ac5be37d41e1c165229ef145c690420074fdf4b51aa9651e28bcc 6204856 chromium-driver_125.0.6422.60-1~deb12u1_amd64.deb 6cf7da5100348009f31beca137d299c29d84ece83d4f787e5324d0676bb935e1 14116 chromium-sandbox-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 404cd16111fcd17dfbfa66d4655aec000ec96b01151eccfba8b166ee04fbc5d3 90228 chromium-sandbox_125.0.6422.60-1~deb12u1_amd64.deb 3b2fce95df2344c65c7717466ff8f4f2010ee5ce31e3f8e7a3f65d03ac9d95ec 30843520 chromium-shell-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 86e71795ed31825b6b12344075fdf83d57ae8e8cb1a4b5f643746977c26cfa9b 52188264 chromium-shell_125.0.6422.60-1~deb12u1_amd64.deb 878130baad8f78f2372bc647ebd5b63beb28ba850efbcb5b81954eb3dd39f75a 24719 chromium_125.0.6422.60-1~deb12u1_amd64-buildd.buildinfo c51ba96d5c8861b6ca4e4509922afea59fd60c0d398ffcf3acbf4d9e9b326a55 74471952 chromium_125.0.6422.60-1~deb12u1_amd64.deb Files: ffacca6a573b39e050c7de837b8dbfa4 1225928 debug optional chromium-common-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 8e49fa4ddefae308152020d52e961297 5015272 web optional chromium-common_125.0.6422.60-1~deb12u1_amd64.deb 5fd5734de82f4a506f1b8b6611646c60 35474108 debug optional chromium-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 7efae9db0632832f6a96d623589ff5a3 6204856 web optional chromium-driver_125.0.6422.60-1~deb12u1_amd64.deb 87ab6a7391388c05a0bf9ec0db098958 14116 debug optional chromium-sandbox-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb f281f870149ddb0833700f83d090b793 90228 web optional chromium-sandbox_125.0.6422.60-1~deb12u1_amd64.deb c1332d03a60f860c5ff8053b3c6b6e21 30843520 debug optional chromium-shell-dbgsym_125.0.6422.60-1~deb12u1_amd64.deb 705c4a0e0f140119d42689b8a56b01e3 52188264 web optional chromium-shell_125.0.6422.60-1~deb12u1_amd64.deb 34cad64fcd2c42caff0cbfd57c3c18a9 24719 web optional chromium_125.0.6422.60-1~deb12u1_amd64-buildd.buildinfo 22da55e0392db3fc9cb5e3cac96596f1 74471952 web optional chromium_125.0.6422.60-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvy6d65NNYPbL6IQIEQ1nooK/IAQFAmZHg4EACgkQEQ1nooK/ IATTIw//bH8ZTq2UNce9yk0LHD9ZjGO0b+wPJ7fz6BirnmNOsr8CVu3tU5KnJYPY 9W681+XoxFYktYLBdqPVEF/7UCYcMtgFz0ueQOcv7/NQA9p/GZS0dHS58Bj5Gq+W wH91F8VTrUkOtL3EOljVcnbfLHWSvd2nqFVXpbREO2K4EFBvxP0Ni4Tabm0ngdJ4 y6PDLmBVyNMApgVWD+x7wEjwf/l00SIlR794nFemuydWDhaIBdygytYlLigPWNMa HPvUonsrKoxfm7UIcLpGp/YPejfNfqlh8vCG/WGIUnreioMe1D4uHSAKiOm1jNq8 HG1SaFwPRw065BK4qCY/6YBcTCXERDz7ojPmnCQSmBGaJnihVN98oz/vE6MzhZY9 7PEuA03qPJAS3WxdOMkV9kY3pXqSHgrfuwOWOS51LYbCfEWsavrJafPUDQmXIfm1 hXz4uBpQrG3kt4axTUWEjUvMWtGoBcVNtb1psx+TGpvLx/9SDHp7ad0hLzy80MjX SYm2+FpxidomEo97Q29jdc3truk5s39BbtaBNOQcsMP2QqYWqsoouekFr71qKtoT rZzu+mn0gf/XAZSH8ZtO9LSv/1lspLbetjz19/s6kyV6eelsHuZHezzE7yfDyV5f qDYcReWLPvz74kSZ/5VjvhNQlaV5qaSRHcHjMqVTjJ2UtOdeJzM= =c4Z9 -----END PGP SIGNATURE-----