-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Feb 2024 19:56:32 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 122.0.6261.57-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (122.0.6261.57-1~deb12u1) bookworm-security; urgency=high . * New upstream stable release. - CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous. - CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-1671: Inappropriate implementation in Site Isolation. Reported by Harry Chen. - CVE-2024-1672: Inappropriate implementation in Content Security Policy. Reported by Georg Felber (TU Wien) & Marco Squarcina (TU Wien). - CVE-2024-1673: Use after free in Accessibility. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2024-1674: Inappropriate implementation in Navigation. Reported by David Erceg. - CVE-2024-1675: Insufficient policy enforcement in Download. Reported by Bartłomiej Wacko. - CVE-2024-1676: Inappropriate implementation in Navigation. Reported by Khalil Zhani. * d/patches: - fixes/v8-compressed-ptrs.patch: drop, merged upstream. - fixes/stdint.patch: drop, merged upstream. - upstream/vector.patch: drop, merged upstream. - upstream/display-header.patch: drop, merged upstream. - upstream/bitset.patch: drop, merged upstream. - upstream/once_flag.patch: drop, merged upstream. - fixes/std-to-address.patch: refresh. - disable/signin.patch: refresh. - disable/catapult.patch: refresh. - bookworm/clang16.patch: refresh, and change -Wno-c++11-narrowing-const-reference to -Wno-c++11-narrowing. - bookworm/nvt.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: update from ungoogled-chromium. - bookworm/undo-internal-alloc.patch: revert a commit that confuses clang16 w/ libstdc++. We need a better workaround than this. - upstream/mojo.patch: update from git. - bookworm/constexpr-equality.patch: add a few more build fixes (constexpr removals). - upstream/uniqptr.patch: add missing include. - upstream/optional.patch: add missing include. - upstream/bookmarknode.patch: add comparison equality fix pulled from upstream. - fixes/optional.patch: add missing includes. - bookworm/nvt2.patch: revert another upstream c++-20 change for clang-16. - upstream/bitset.patch: add missing include. - ppc64le/v8/0002-Add-ppc64-trap-instructions.patch: refresh. - bookworm/eraseif0.patch: revert another commit; needed by eraseif-lambda.patch. - bookworm/eraseif-lamba.patch: refresh. - bookworm/undo-rust-req.patch: refresh. - bookworm/bubble-contents.patch: remove static_assert() that fails with libstdc++12. . [ Timothy Pearson ] * d/patches/ppc64le: - 0001-Properly-detect-little-endian-PPC64-systems.patch: drop, upstream fix in GIT hash 25a6e6 - 0001-Add-PPC64-support-for-boringssl.patch: refresh for upstream changes - 0002-third_party-libvpx-Remove-bad-ppc64-config.patch: refresh for upstream changes - skia-vsx-instructions.patch: refresh for upstream changes Checksums-Sha1: f4933a7153c9b5fa368e20846d7bab7f571295d0 1162704 chromium-common-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 68accf8c737b2e2c37b0ad315a4252c0d25be789 4977104 chromium-common_122.0.6261.57-1~deb12u1_i386.deb 977815c698f1b7c2edeb32dd6862d6e042ee6d50 32353984 chromium-dbgsym_122.0.6261.57-1~deb12u1_i386.deb e741807e39def08ae427c20604431909a99bebce 6224540 chromium-driver_122.0.6261.57-1~deb12u1_i386.deb 179d78543a3d691a0f9d14beeedd72982c3c51fa 13948 chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 2842d10b1c522a2e6c1cc973d61d4fc878f9cdd8 86416 chromium-sandbox_122.0.6261.57-1~deb12u1_i386.deb 178635d9f207f5b031e259152622f606bc1726d3 27534528 chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_i386.deb a7f5ca76df3de9cbd98cb079c92249601b03c924 51593108 chromium-shell_122.0.6261.57-1~deb12u1_i386.deb 3c1f14b13068c5cc567dcbfe2e2211a60ce49d0e 24440 chromium_122.0.6261.57-1~deb12u1_i386-buildd.buildinfo 8dc4d275c74c491aff2faf2a503be856c2697758 74695992 chromium_122.0.6261.57-1~deb12u1_i386.deb Checksums-Sha256: 2b9901e5079170669fd48ccfbbc4ca0b2e35a0cc5368b89a9313834bd4ec19c6 1162704 chromium-common-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 3ccf5274fadbb6ba128dcf9d2b0b30fd7c3afc063be27eed346f5f505f157cde 4977104 chromium-common_122.0.6261.57-1~deb12u1_i386.deb 58dd153f15ce7695f8ac0b20a99130d6c4481c2ff282b814b59cb79ce2297a82 32353984 chromium-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 8500102465d760ada30627a81f078da61951de9d05d34b144fbf64b5d54c00b8 6224540 chromium-driver_122.0.6261.57-1~deb12u1_i386.deb 2a15ca1599ef96f8d8520cc4e22f562a205aff60e0acf3b11837a8ed72d84aff 13948 chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 7dfab29bc1e1e918e27fc6489f13c06fc05322843f5ee6a16a8895ed7f0a3112 86416 chromium-sandbox_122.0.6261.57-1~deb12u1_i386.deb 897f818f965960bf873c23d1f9b84c4c7d0231e6da42d772960c65384b9c9911 27534528 chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 34afbbc584e6bf86b8914a794f9aeb8a55626f24c82055f432ea239d0cd8448d 51593108 chromium-shell_122.0.6261.57-1~deb12u1_i386.deb e8fa9e376d8562cb6a27edc41f7f8173a4d0b65cd250a86d5916836e49605d78 24440 chromium_122.0.6261.57-1~deb12u1_i386-buildd.buildinfo 434153bef287d4d26119277aa1d007555efc3a655a067c26e02de279c83375ef 74695992 chromium_122.0.6261.57-1~deb12u1_i386.deb Files: 3d0e0942a1ffd411dc47f86c5021e763 1162704 debug optional chromium-common-dbgsym_122.0.6261.57-1~deb12u1_i386.deb d276f655c064b10e867d667484e7fa2f 4977104 web optional chromium-common_122.0.6261.57-1~deb12u1_i386.deb fd0ee48ad1fd593c22e76676b879dfa2 32353984 debug optional chromium-dbgsym_122.0.6261.57-1~deb12u1_i386.deb c0380c5fb72ab091e585db60433ac397 6224540 web optional chromium-driver_122.0.6261.57-1~deb12u1_i386.deb 40056d0b2c738eb09f92be8f96f3e07b 13948 debug optional chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_i386.deb 8f7f91aba61a27f3d6a2965516622ad7 86416 web optional chromium-sandbox_122.0.6261.57-1~deb12u1_i386.deb c7f5dd6eaf9f04db3cebb3c2fa0ee1c7 27534528 debug optional chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_i386.deb cfa825c11d44f598e502de1c9d2c8ba9 51593108 web optional chromium-shell_122.0.6261.57-1~deb12u1_i386.deb 5921604df07b9f1fc3e3a76cc329e1ad 24440 web optional chromium_122.0.6261.57-1~deb12u1_i386-buildd.buildinfo 70ca2f11648eced559ffddcbf2fd4d0b 74695992 web optional chromium_122.0.6261.57-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEqYm4ZPyuLwhx8Meo2VckltclZ4AFAmXYIzEACgkQ2Vckltcl Z4CxUg//R1ubFzgpLAyJ0kBZjs5LQ41xsM/07Nj5m8Gu34WnPojZDsr7ge1UuXc2 yVWHz855aqP3w0Tmz9POzfEt/mOqEmL7z7kC+yt/gUdSExpc3KkBfJlFmTZWReW5 8Yy4QpRssqmBWQN+mlVoLuIWLoW2w0nwT+AnZonC51O1la0ot2BhR3JqZ1j/viVl IdwHAhC3xRm2YTK9sTWqkxAHdnVFI8fse72BDdHj+tkEw6mE7sByEMMua5fM3lrm lsFtHuvU1GfMZy8/mafx8rp7q/n7bP5/avln3fYRLyrtGWkvtayHwL2pm14yHupU Xxzgx5VCPNS1nGVp6ec3yEJEXaGmrA9e01rAf8RYLP0smguBKflBL/rREsXIWKdw 6bhGDkvaMDzR3i6cpMzPo2JFAcojfke3LbzjCtx/Q+M7FfVSfKMC6iSMHLz6q5fq GAAX/PLvKA+7eP6EGkj7NyHn48wnnBQkZJ5X+65cqv98dK08OgBCwghJiuBF+oTB edSjrPEISHyT3R4D9XulrOUyIhTzR7kWhJLYPVE7o/aLDsrR00C/I2rG+F/F5ERo SJNIPthygVOVAqiVfrsg9iKVT7NrR0ZoqxFTFUA5OAG6xwBsY46ZYxm4mQs98YCk Rml2Hy1IMlAjLWJgdPJ3ASZk3tj9ghytHpgMV05cNL12i89spak= =LKRC -----END PGP SIGNATURE-----