Re: chromium: Update to version 94.0.4606.61 (security-fixes)

[Moritz Muehlenhoff <jmm@inutil.org>]

On Sat, Jan 01, 2022 at 01:23:09PM -0500, Andres Salomon wrote:
> How should I handle this? NMU to sid, let people try it out, and then
> deal with buster/bullseye?

Yeah, let's proceed with unstable first in any case.

> Upload everything all at once? I'm also
> going to try building for buster, unless the security team doesn't
> think I should bother.

I saw
https://salsa.debian.org/dilinger/chromium/-/commit/5c05f430e192961527ec9a64bbaa64401dc14d95 ,
but buster now also includes LLVM/clang 11 (it was introduced to support a more recent Rust
toolchain needed for Firefox), so you might be reduce complexity here further:
https://tracker.debian.org/pkg/llvm-toolchain-11

It's in buster-proposed-updates since there hasn't been a point release since, but for
the purposes of buster-security builds, it doesn't matter (they chroots have been modified
to includen buster-proposed-updates temporarily):

I'd say if it works out without additional overhead, let's also update buster-security,
but it's also important not to overstretch the time/resources, so focusing on bullseye and
EOLing buster is also an option for sure.

Cheers,
        Moritz