-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 30 Apr 2024 17:53:52 -0400
Source: chromium
Architecture: source
Version: 124.0.6367.118-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
 chromium (124.0.6367.118-1~deb12u1) bookworm-security; urgency=high
 .
   * New upstream security release.
     - CVE-2024-4331: Use after free in Picture In Picture.
       Reported by Zhenghang Xiao (@Kipreyyy).
     - CVE-2024-4368: Use after free in Dawn. Reported by wgslfuzz.
   * Build-dep on libhwy-dev and delete the bundled third_party/highway.
   * Build-dep on libharfbuzz-dev and delete the bundled harfbuzz-ng.
   * Build-dep on libdav1d-dev and delete the bundled third_party/dav1d.
   * d/patches:
     - ppc64le/third_party/0001-Add-PPC64-support-for-libdav1d.patch,
       ppc64le/third_party/0001-Fix-libdav1d-compilation-on-clang-ppc.patch,
       ppc64le/third_party/0003-thirdparty-fix-dav1d-gn.patch,
       fixes/arm64-ftbfs.patch: drop these 4 patches that are only needed
       for bundled libdav1d.
     - ppc64le/third_party/0001-Fix-highway-ppc-hwcap.patch,
       ppc64le/third_party/0002-Highway-disable-128-bit-vsx.patch: drop
       these two patches that were needed for bundled highway.
     - upstream/ozone1.patch: drop, merged upstream.
     - upstream/ozone2.patch: drop, merged upstream.
     - fixes/bad-font-gc2.patch: refresh.
 .
   [ Timothy Pearson ]
   * d/patches/ppc64le:
     - third_party/0001-Add-PPC64-support-for-boringssl.patch: Fix inadvertent
       breakage of i386 build
Checksums-Sha1:
 54548370c9a562ee41876a470bd13a18348b97db 3772 chromium_124.0.6367.118-1~deb12u1.dsc
 bf147e70185544f73a8bb796737b46b51d733613 838274004 chromium_124.0.6367.118.orig.tar.xz
 978cc3d0877edf2e5d0a417407659e9a6062efec 415048 chromium_124.0.6367.118-1~deb12u1.debian.tar.xz
 bfc756b38e56b6851cf6e0f24cb0c4249945688e 21788 chromium_124.0.6367.118-1~deb12u1_source.buildinfo
Checksums-Sha256:
 281edb8d1ff4b55cc165d0bd49afaa400304fbe35038268f73634f9a667f3dec 3772 chromium_124.0.6367.118-1~deb12u1.dsc
 818218960c0d362c8f95b6b56d868d1313cf18786276996856b598a63683ef33 838274004 chromium_124.0.6367.118.orig.tar.xz
 8ba36eeb38d04d7b4be9a92a1f6a0877723f2f17be433049af7e6b2ff08bfdbe 415048 chromium_124.0.6367.118-1~deb12u1.debian.tar.xz
 8b8d1c059d32dc2d52047f2ba0c9e42b1bbb4a2a442b324f20f35b53eba90b9f 21788 chromium_124.0.6367.118-1~deb12u1_source.buildinfo
Files:
 dce3f12fc8802af8d4ca339e8407ff2c 3772 web optional chromium_124.0.6367.118-1~deb12u1.dsc
 f462cf405fa0b58c828b31e1da944114 838274004 web optional chromium_124.0.6367.118.orig.tar.xz
 80e68d34b8e00e0a47a1fa7898de5b70 415048 web optional chromium_124.0.6367.118-1~deb12u1.debian.tar.xz
 cb4f467cecb7fc9aaf4959432d77c1d2 21788 web optional chromium_124.0.6367.118-1~deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ZFSd
-----END PGP SIGNATURE-----