-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 May 2024 22:11:26 -0400 Source: chromium Architecture: source Version: 125.0.6422.141-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (125.0.6422.141-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-5493: Heap buffer overflow in WebRTC. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5494: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5495: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-5496: Use after free in Media Session. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-5497: Out of bounds memory access in Keyboard Inputs. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2024-5498: Use after free in Presentation API. - CVE-2024-5499: Out of bounds write in Streams API. * d/patches/fixes/libxml-parseerr.patch: move to bookworm directory. * d/control: add versioned build-dep on libxml2-dev < 2.10. Checksums-Sha1: fbdfab5617042e950bfc613f8ec79d2de8789c32 3782 chromium_125.0.6422.141-1~deb12u1.dsc 4ff8c8e30a97f8d1ab49d5ba5578192552a941a5 843803988 chromium_125.0.6422.141.orig.tar.xz a7e820a624542ceb2dd76ee8bdc3ba491839f549 431964 chromium_125.0.6422.141-1~deb12u1.debian.tar.xz 2d0cf307f342ba3ba40b80cbdca113431446352e 21917 chromium_125.0.6422.141-1~deb12u1_source.buildinfo Checksums-Sha256: dda1ba4f2411759848d833280175ed16ce158dbeebf07699b04500bc14292117 3782 chromium_125.0.6422.141-1~deb12u1.dsc ce13fa96561b3a724af2e03b716c0b57d808b4e0bc13fbff9f52f46e7ff55710 843803988 chromium_125.0.6422.141.orig.tar.xz fc42b3f7abeff8a2be6061d50922fe546740f683ada00413e7e4683434106f7c 431964 chromium_125.0.6422.141-1~deb12u1.debian.tar.xz cf1e271d46a11e0b3dcf86975e48e362811815a07ff49fc7061eb8b3796c8910 21917 chromium_125.0.6422.141-1~deb12u1_source.buildinfo Files: 0f12bbc76c8373ef01bdb08cbf1be800 3782 web optional chromium_125.0.6422.141-1~deb12u1.dsc 52c57240c0631b17b3d466c4cd9661f9 843803988 web optional chromium_125.0.6422.141.orig.tar.xz 516e6bbfa639658c890ab6a13abf1c3c 431964 web optional chromium_125.0.6422.141-1~deb12u1.debian.tar.xz da3d8195eea3ffe66f5b3619b6d30932 21917 web optional chromium_125.0.6422.141-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmZZeIsUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeoixAAxBC2y1bJ+CGKQYOQFj++t2U2/ZYF uRReDPO3QPppLLyZeWYBTUVi+QduuveAcksu8B4q00htIjidvIBT3jTRO+Jruo3i qC3/R5abZoH5SjSJCrwUHOloeWN7iamukmGRDnWJxHi/Y6ZiC4A0Hfbb9a/pkw2q cWXv9rt83QFs9nvPnJvebA5Sr1wcpt/q6xk8N40zqAxEOXpcD2qcPGfHghCGWyqL uOU/9r/7cf0gURs0kOtZXbIvqcKtWFJTsdAMbMQj2uze9LEet28njNzyPBnLAZ0X hnsE9Fqr714wtJQmAWtghY5tsprAb39/JhFiZ+lsKMFBmmqd5hAqknYOlEtAJnX9 xUxHfNzcG/ZLhfA33qgYEGs90nFb1cS8Fd2Il0ofjjZbLJ+LO9MPKa6Mk7rZ9MNW dYy5Kvc75COgu7g/uJKlwuR6QYPJ6H83BIAub1Tr6DiG4ffEwROmznld2jSfuFW5 1S0TYgjQyjTFQdTuqfYqEetv/89dWG88uXcbCNXBVkcwJzRkNDCP9YxMgmgT9pkG SrCs0LnZAYNQLGDMg2hCtW5hlByfTFyv6FMX3XcIgDJ41FBToPN593mZD6DyGRWx jCg12e87vanVLhPnPlKmuh8jUF1Hc9WlH9TC8s12U7ar4TYOcm8Bkqo5eeIMRrn9 yJvyJsDgVwwSACY= =t/+d -----END PGP SIGNATURE-----