-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Oct 2024 01:07:19 -0400 Source: chromium Binary: chromium-l10n Architecture: all Version: 129.0.6668.89-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Closes: 1033747 1077345 1082907 Changes: chromium (129.0.6668.89-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-7025: Integer overflow in Layout. Reported by Tashita Software Security. - CVE-2024-9369: Insufficient data validation in Mojo. Reported by Xiantong Hou and Pisanbao of Wuheng Lab. - CVE-2024-9370: Inappropriate implementation in V8. Reported by Nguyễn Hoàng Thạch, Đỗ Minh Tuấn, and Wu JinLin of STAR Labs SG Pte Ltd. * d/patches: - bookworm/libxml-parseerr.patch: readd for downgraded libxml2 in unstable (closes: #1082907). - upstream/wayland-gbm-pixmap.patch: backport two patches to fix noisy wayland video playback (closes: #1077345). * Build against system libtiff, thanks to Soren Stoutner for getting this fixed upstream (closes: #1033747). Checksums-Sha1: b2b81f7e423d77eaae37d7764593820592112f83 7701208 chromium-l10n_129.0.6668.89-1~deb12u1_all.deb aa3814d5e392a7bef25f641af390cc1854d83bf8 22149 chromium_129.0.6668.89-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 3703ccf03e894076c299e4352956233c134348d30089109968b9b73c3e925bc6 7701208 chromium-l10n_129.0.6668.89-1~deb12u1_all.deb d0ac266985c386f0dae32b1c3e06317f994643e037be6b5e7b4def6f81101823 22149 chromium_129.0.6668.89-1~deb12u1_all-buildd.buildinfo Files: bc070160a305efc0bedb091b5f4e61e2 7701208 localization optional chromium-l10n_129.0.6668.89-1~deb12u1_all.deb a111b00dbdbcc08d3dcd642351e7c3cd 22149 web optional chromium_129.0.6668.89-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmb+LEIACgkQOni7ZmUp KEfz/A//eaB19eZms1YcBhiGPzXt/4dR7+2c+37O7H6kP6uj9O4vztgVe7MCbLhD bifjS6ezWMAp73CmXpueVIJ3/bl4NEXUHQv4Xkn+cNAjBOE+cl2iwD6mw8Q7LGYi I+tbf0kDtZ8qf1NekGak9a6qiQoqF9XThIpT6ZBzJMGw5qpwOZlf7wMpmnAdx+Xl Set9x1jblyirKlRZcXZ/ZMkwctkRpfj6/AhHcm3T2Y68tTVLSqyqH2+ei/Yktzij 62DAudnvw7vUpQLr5a0Zj5D/sZTsbLuUIp+4LcbwIsYpEtNDyaUry+SVidEf68ot SjPt/BEHnTLZGWukmx/Ap9FYwdo+fP0KSPccITa1kUSuukCLz6hj47Aclmlj539/ cVSp1kQBQ1BZH6hRiHIjaAPVsHwihDiMPjM9b9XtZDLnLO/4z2HrakDvdYEN8IiA 8s/nUyr1CrnII74umh4lDPAFir0OLHDYLGoe/fm/6i5QPxnlV3yHUUlXbdXpRvda dEVULlgc8PNrXrZ5Sj74gEN4IzODWZh5WB+RG8adp9auJlIOT8sjFNeUQrGbitnh pAXlJ+2qzblIL3L+tDcJLV0MDlKRmDEl8Ck4NSCu+lZfA6HWCzLVie8ZFbJO0XVs OD1g3PA81wL1ai9QF3Th2b3g4fZXNbSYgjtTgz9UfJg1hzlLlac= =L6mX -----END PGP SIGNATURE-----