-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 02 Oct 2024 01:07:19 -0400
Source: chromium
Architecture: source
Version: 129.0.6668.89-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Closes: 1033747 1077345 1082907
Changes:
chromium (129.0.6668.89-1~deb12u1) bookworm-security; urgency=high
.
* New upstream security release.
- CVE-2024-7025: Integer overflow in Layout.
Reported by Tashita Software Security.
- CVE-2024-9369: Insufficient data validation in Mojo.
Reported by Xiantong Hou and Pisanbao of Wuheng Lab.
- CVE-2024-9370: Inappropriate implementation in V8. Reported by
Nguyễn Hoàng Thạch, Đỗ Minh Tuấn, and Wu JinLin of STAR Labs SG Pte Ltd.
* d/patches:
- bookworm/libxml-parseerr.patch: readd for downgraded libxml2 in
unstable (closes: #1082907).
- upstream/wayland-gbm-pixmap.patch: backport two patches to fix
noisy wayland video playback (closes: #1077345).
* Build against system libtiff, thanks to
Soren Stoutner <soren@stoutner.com> for getting this fixed upstream
(closes: #1033747).
Checksums-Sha1:
e1d2701790391e9f7e23ed15e65664991ac87484 3812 chromium_129.0.6668.89-1~deb12u1.dsc
64c765dc49a302d32eac17fb3a1ef617af0a9c5e 785983212 chromium_129.0.6668.89.orig.tar.xz
a79e274b3a8c24a0480909f839cab738d82f5ab7 8493596 chromium_129.0.6668.89-1~deb12u1.debian.tar.xz
72be8697f54501945221b3e76629bb68a7d9b8c1 22071 chromium_129.0.6668.89-1~deb12u1_source.buildinfo
Checksums-Sha256:
d9e58d9971e85ae8e9402cb7bdad51b7e00e110f5be8c53622cdffd1077b942a 3812 chromium_129.0.6668.89-1~deb12u1.dsc
37e708e7f361085361b7739d413ae9e7d4df23a288a5d77f783696b6f87bc529 785983212 chromium_129.0.6668.89.orig.tar.xz
5b0c132042f754d3c610c5384acae4b49bb9d47a72bf1519022acadf9a4d40dc 8493596 chromium_129.0.6668.89-1~deb12u1.debian.tar.xz
22d4d8c377aa2824431a267c5529e549e328729cf9eee09e5fe7873a26dfb53f 22071 chromium_129.0.6668.89-1~deb12u1_source.buildinfo
Files:
ee225c10514e5f88f000881df418387e 3812 web optional chromium_129.0.6668.89-1~deb12u1.dsc
5c9f3591bbfd2290ae2d7d840f08160e 785983212 web optional chromium_129.0.6668.89.orig.tar.xz
c704f1ba285626fc9db7187747eca91e 8493596 web optional chromium_129.0.6668.89-1~deb12u1.debian.tar.xz
f82f478c12263dbb2874653e4b6ea0cd 22071 web optional chromium_129.0.6668.89-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=J0mc
-----END PGP SIGNATURE-----
Attachment:
pgpm2SRvcbFhk.pgp
Description: PGP signature