-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Sep 2024 15:23:27 -0400 Source: chromium Architecture: source Version: 129.0.6668.70-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (129.0.6668.70-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2024-9120: Use after free in Dawn. Reported by Anonymous. - CVE-2024-9121: Inappropriate implementation in V8. Reported by Tashita Software Security. - CVE-2024-9122: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n). - CVE-2024-9123: Integer overflow in Skia. Reported by raven at KunLun lab. * d/copyright: delete more upstream .clang, .git, and android residue. . [ Timothy Pearson ] * d/patches: - fixes/predictor-denial-of-service.patch: Work around upstream issue #368562245, which can cause denial of service of the entire browser process on specific types of Web sites. Checksums-Sha1: 3b1ef57f77d25d5ec82c32f3bfced0957630a441 3799 chromium_129.0.6668.70-1~deb12u1.dsc e986412a154dd002a83d900737eb76e7d611f0f0 786382348 chromium_129.0.6668.70.orig.tar.xz bc13e071116f9d8cbc019dc0a5eae6c4695d0956 8492228 chromium_129.0.6668.70-1~deb12u1.debian.tar.xz c9ea46ce1aef95fb87a52a6c7246dde507394ae3 22071 chromium_129.0.6668.70-1~deb12u1_source.buildinfo Checksums-Sha256: 0cc302cf7f724a6c8dd0926e24a80627754a2488f21dbf658fd560885bece573 3799 chromium_129.0.6668.70-1~deb12u1.dsc 1e06dabd40126cab7f601c3b5f813e1b1a9b48095b21d58e512acdd9774b655f 786382348 chromium_129.0.6668.70.orig.tar.xz 9e13d9e6367d19a016d37c94fc7cc5e1157809ba33bc056349feecd8ad6dc84a 8492228 chromium_129.0.6668.70-1~deb12u1.debian.tar.xz df9774641dbeafbf6ff99990c7b373a84f98f61795230ca1e3ffdd6985cff16e 22071 chromium_129.0.6668.70-1~deb12u1_source.buildinfo Files: 667ece925ab868ec04a844ed58853e93 3799 web optional chromium_129.0.6668.70-1~deb12u1.dsc 2219b8294860a0af9a903b91a21de67c 786382348 web optional chromium_129.0.6668.70.orig.tar.xz d9fee37545f56192713e4a1c917d374c 8492228 web optional chromium_129.0.6668.70-1~deb12u1.debian.tar.xz a947b91501feaf0d601d16dfedd98f30 22071 web optional chromium_129.0.6668.70-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmb0q1gUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudje0HBAAttGLqEG6jo0ixu2kVzK+0vta3nON hGP1A/uTdYgYw2R0ttUF3rbIuauR+k1SGh5D32Wv3B9MRBPaMGXQDZXF3+cnCeuu sVedWDabxbZkXKPtg4fRq5e3mLzkJh2QpRRY7sKjgx880tJ0ByL8sVFIsGGejvWT ZN9kADce/IipcA6jXVZV+fnZQLLY8SgGIx4pGAUNc+5ti0Jz2Jj0IMWt26byxn4r VWRgvGSm+9KVGnmXd05gOAEvLluCB5zar0RoURsVP9Z2Y22YPi/kuM0UkmiK9Jm6 IhaK5/Q8p5NOLRYwSfswGjE/0cUTDFZFOGtcJb6TiK/JeTusYytOYxY7GVRDr36a LJCJ1WDmwjW7FK74BaxZbT6KDgmCLOHKrabdCOwVAuUOUphExizvgEr12vbW4kHL Bqdj4b0sDBUDyrTjgQfidaGKy7DjW+ivGj0+JytNrYk/c4Wbg4hEVLBE0Au52X8I gSYaKT1M0/QiHI4A7yCe5xuxlVI4bTy4tKw/tJcJN5OotRwwdWwpJEWIYSvHYKzt wy7Kj5lU5ECAPTuPZMTI9WdTV+yFZcgZ8pZtGDyK6bPIP2N+EvNkm4WshTdzqicV k5sH7bbqLXnJfElYykfF6H/f7h8i8CLNfwsW0F4uRxWVIRhQkjXEE0dGNei0Nk8x IEZomi6Eh2TZwi8= =X4M9 -----END PGP SIGNATURE-----