-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 18 Sep 2024 20:47:23 -0400
Source: chromium
Architecture: source
Version: 129.0.6668.58-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
 chromium (129.0.6668.58-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream stable release.
     - CVE-2024-8904: Type Confusion in V8. Reported by Popax21.
     - CVE-2024-8905: Inappropriate implementation in V8.
       Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team.
     - CVE-2024-8906: Incorrect security UI in Downloads.
       Reported by @retsew0x01.
     - CVE-2024-8907: Insufficient data validation in Omnibox.
       Reported by Muhammad Zaid Ghifari.
     - CVE-2024-8908: Inappropriate implementation in Autofill.
       Reported by Levit Nudi from Kenya.
     - CVE-2024-8909: Inappropriate implementation in UI.
       Reported by Shaheen Fazim.
   * d/patches:
     - debianization/sandbox.patch: refresh for upstream changes. Since we
       have some downstream users of this package, retain the Ubuntu wording.
     - disable/tests.patch: refresh.
     - disable/catapult.patch: refresh.
     - bookworm/clang16.patch: refresh, delete -Wno-dangling-assignment-gsl
     - ppc64le/crashpad/0001-Implement-support-for-PPC64-on-Linux.patch:
       refresh.
     - ppc64le/sandbox/Sandbox-linux-services-credentials.cc-PPC.patch:
       refresh.
     - ppc64le/third_party/dawn-fix-ppc64le-detection.patch: refresh.
     - bookworm/more-spaceships.patch: yet another clang-17 header
       backport for clang-16 inadequecies.
     - bookworm/signer-lambda.patch: clang-16 lambda bug workaround.
     - bookworm/bubble-contents.patch: refresh.
 .
   [ Timothy Pearson ]
   * d/patches/ppc64le:
     - third_party/dawn-fix-typos.patch: drop, applied upstream
     - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch:
       refresh for upstream changes
     - libaom/0001-Add-pregenerated-config-for-libaom-on-ppc64.patch: refresh
       for upstream changes
     - core/cargo-add-ppc64.diff: Add ppc64 to cargo architecture definitions
Checksums-Sha1:
 489bd762f371b6f28bea472fdc7b6dec5c1fa620 3799 chromium_129.0.6668.58-1~deb12u1.dsc
 21e37f2343432358b55d6de7aee574b6cfdb72ce 793288280 chromium_129.0.6668.58.orig.tar.xz
 31bf72ca96ae4bc379efd867a30c18ca3a3956bb 8491688 chromium_129.0.6668.58-1~deb12u1.debian.tar.xz
 ebd21190c9448dcb8aa2444fe803dd1fbe06fe88 22071 chromium_129.0.6668.58-1~deb12u1_source.buildinfo
Checksums-Sha256:
 50086e925ac408a6d7c4e4dc2bd310448ec8411a4d7f7096424eb2f6a62c572a 3799 chromium_129.0.6668.58-1~deb12u1.dsc
 fe1325cf12ffbfab47a074229cbe2a70f7c3d500b28bb34d7448477764b6a419 793288280 chromium_129.0.6668.58.orig.tar.xz
 3b60595fe4fc381bf6cae32b4a0dbe54cef858d443ece81d574243a76a6a3d37 8491688 chromium_129.0.6668.58-1~deb12u1.debian.tar.xz
 510f910b30c5259aff02054cc14726545cb377266647f2daedde3240ce261c94 22071 chromium_129.0.6668.58-1~deb12u1_source.buildinfo
Files:
 4b43539938ce4535c7118d7967ac6158 3799 web optional chromium_129.0.6668.58-1~deb12u1.dsc
 f5ad630e2e285f9fe88f5246c288b236 793288280 web optional chromium_129.0.6668.58.orig.tar.xz
 fccb65c1b8d195ad96c8a48807b20680 8491688 web optional chromium_129.0.6668.58-1~deb12u1.debian.tar.xz
 179df17fcaebef6e6a697fadf562456b 22071 web optional chromium_129.0.6668.58-1~deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=DkPc
-----END PGP SIGNATURE-----