-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Feb 2024 19:56:32 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 122.0.6261.57-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (122.0.6261.57-1~deb12u1) bookworm-security; urgency=high . * New upstream stable release. - CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous. - CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-1671: Inappropriate implementation in Site Isolation. Reported by Harry Chen. - CVE-2024-1672: Inappropriate implementation in Content Security Policy. Reported by Georg Felber (TU Wien) & Marco Squarcina (TU Wien). - CVE-2024-1673: Use after free in Accessibility. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2024-1674: Inappropriate implementation in Navigation. Reported by David Erceg. - CVE-2024-1675: Insufficient policy enforcement in Download. Reported by Bartłomiej Wacko. - CVE-2024-1676: Inappropriate implementation in Navigation. Reported by Khalil Zhani. * d/patches: - fixes/v8-compressed-ptrs.patch: drop, merged upstream. - fixes/stdint.patch: drop, merged upstream. - upstream/vector.patch: drop, merged upstream. - upstream/display-header.patch: drop, merged upstream. - upstream/bitset.patch: drop, merged upstream. - upstream/once_flag.patch: drop, merged upstream. - fixes/std-to-address.patch: refresh. - disable/signin.patch: refresh. - disable/catapult.patch: refresh. - bookworm/clang16.patch: refresh, and change -Wno-c++11-narrowing-const-reference to -Wno-c++11-narrowing. - bookworm/nvt.patch: refresh. - ungoogled/disable-privacy-sandbox.patch: update from ungoogled-chromium. - bookworm/undo-internal-alloc.patch: revert a commit that confuses clang16 w/ libstdc++. We need a better workaround than this. - upstream/mojo.patch: update from git. - bookworm/constexpr-equality.patch: add a few more build fixes (constexpr removals). - upstream/uniqptr.patch: add missing include. - upstream/optional.patch: add missing include. - upstream/bookmarknode.patch: add comparison equality fix pulled from upstream. - fixes/optional.patch: add missing includes. - bookworm/nvt2.patch: revert another upstream c++-20 change for clang-16. - upstream/bitset.patch: add missing include. - ppc64le/v8/0002-Add-ppc64-trap-instructions.patch: refresh. - bookworm/eraseif0.patch: revert another commit; needed by eraseif-lambda.patch. - bookworm/eraseif-lamba.patch: refresh. - bookworm/undo-rust-req.patch: refresh. - bookworm/bubble-contents.patch: remove static_assert() that fails with libstdc++12. . [ Timothy Pearson ] * d/patches/ppc64le: - 0001-Properly-detect-little-endian-PPC64-systems.patch: drop, upstream fix in GIT hash 25a6e6 - 0001-Add-PPC64-support-for-boringssl.patch: refresh for upstream changes - 0002-third_party-libvpx-Remove-bad-ppc64-config.patch: refresh for upstream changes - skia-vsx-instructions.patch: refresh for upstream changes Checksums-Sha1: 24d976776650b35dc9864da6397f55c6c577b5f2 1270580 chromium-common-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 16dd158d48463de5c6924989efc47f26eded3be3 4832824 chromium-common_122.0.6261.57-1~deb12u1_arm64.deb afd52bd80d6a6568338ee145377616795ce6c2a1 33312072 chromium-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb ac62d82ecec35e050b7f8473f41ae994b6e73bc2 5461160 chromium-driver_122.0.6261.57-1~deb12u1_arm64.deb b65d77eadb78db0020e1decf9199264a53ad924c 14468 chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb b4f35e0814036ab4e88b1baa7120eb26739d8129 86448 chromium-sandbox_122.0.6261.57-1~deb12u1_arm64.deb 35e003d512b9929a55a1ee7eccf1bf1f4d231eca 27663220 chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 3ce94b6aa3686dd1352329d4fedfb8b84aaaa0fd 45098980 chromium-shell_122.0.6261.57-1~deb12u1_arm64.deb 754a956e1f9bb2809ea15c327e0fb580b66ead90 24410 chromium_122.0.6261.57-1~deb12u1_arm64-buildd.buildinfo f84fe8510785869d23de220d3a2dbcf7f0bf7447 65347800 chromium_122.0.6261.57-1~deb12u1_arm64.deb Checksums-Sha256: 3198664d2c2e9c998588af9e151b26cd5d0c948137e1618b3340ca40bac717a3 1270580 chromium-common-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 639ad2e09e5e5a30b25f5ab5dc8343fbceacf056902588574752e6348ee84215 4832824 chromium-common_122.0.6261.57-1~deb12u1_arm64.deb 24963814804911609bee15db364d2448a355eeaaf520b5d0e31c730ff6114d42 33312072 chromium-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 8fe90f24e9454f6dad41951b63d42b2c616ccf04a5189bf0229832a5996f89d9 5461160 chromium-driver_122.0.6261.57-1~deb12u1_arm64.deb 653f76d5bdc1de40a5117d4ee13acce7b29ade01db5f8781e4a5405636142469 14468 chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 9d552e15b17075a0b55c347e03510426ffc00e2c89d1c5c94cc6d5383a9d28ee 86448 chromium-sandbox_122.0.6261.57-1~deb12u1_arm64.deb 5dd2b4e90188442a3681f525a2ef4abb88b94a827a6f9a1c8cc35eb1c9a0a536 27663220 chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 598b5238f40861670d9c63f33b0b78306917b808e3ea005c3645fdaebc8d7de7 45098980 chromium-shell_122.0.6261.57-1~deb12u1_arm64.deb 530cd4bf9b5cc830d54b18617ee86945fb37d1e9aace5e0d5a7979a0edab2e09 24410 chromium_122.0.6261.57-1~deb12u1_arm64-buildd.buildinfo 25f491994a0eac28a4fbd6ae74e48d9a6d2da960e145012e02bf9091ab3768ab 65347800 chromium_122.0.6261.57-1~deb12u1_arm64.deb Files: 01ffd38741a4036eb119199edd3281f9 1270580 debug optional chromium-common-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 4a72892dede70d75dd7b3a1f6dc3e8b7 4832824 web optional chromium-common_122.0.6261.57-1~deb12u1_arm64.deb 96ac32e12634f19d5f14b5b8ef866c43 33312072 debug optional chromium-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 348b33e64c7982a025fe408fbead5e46 5461160 web optional chromium-driver_122.0.6261.57-1~deb12u1_arm64.deb 60fc9acc54bc2670f70fc043fa548f8e 14468 debug optional chromium-sandbox-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb 623c46f1439c33acada619ea8c56c49e 86448 web optional chromium-sandbox_122.0.6261.57-1~deb12u1_arm64.deb cdf98a4b433dbe02b31621c4bc21df19 27663220 debug optional chromium-shell-dbgsym_122.0.6261.57-1~deb12u1_arm64.deb a6b0e03c5d604681317c301822f02015 45098980 web optional chromium-shell_122.0.6261.57-1~deb12u1_arm64.deb 03fd75b06195ec9954350326ff717e90 24410 web optional chromium_122.0.6261.57-1~deb12u1_arm64-buildd.buildinfo 6e86f1f241651dbcfd34f7f5333e9419 65347800 web optional chromium_122.0.6261.57-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEU81tY/BC8e+eAeWhLffeOnPnbLUFAmXYDOoACgkQLffeOnPn bLU3Vw/9EoI8rKcH2QDGizIOtAHgOdgMMvDVClbQr3OdD8yljNmirymFHzlHd4p3 JeXnqoh2mMBxHfbJpyPrtGd+HvVX5V6VKz9XlGt5cF7raw9JyDf1MWLnKfDK7U5D De2W03o6vED/49yywDGALetD8OCmBIc4VYFSgyldcDtGE70q+Fcl2zsqVsLC1Z3n v+3kTXFfdpLgSEB7h1BSl4C2VPTY9yqu3y5xweTRJFv4ThGW0rNqQIXgoWaionIV 23czu4myKHc5DMxPQaHu1ICZjRwOAfInSXJ3FaPqWNMjTe5/IkLfSTIPX4QjFqMI kaVu663ek1kCIYaE9QP+F9bFAvMfg8TOfKtG/0M7TgNjUoRIIuCT/eUaKFQ3HltH Y1LDA58SfvsTwCIHpLTdrxb6sBoohilflpkBvFk0w4A5dkerWWFTSGsQZDEHeQY8 4gVRiQhEPQferrAbC+BLtzWjDguPb2jfMTNg6S+NrHVity9M+7U+FMAPp45o9d4b GxOxrjVq1dWW3tSEF3uRFOvKS9+MFlgXIwOxeGTEqwEpIvCz6RzaTXSRvYVjElKB jGEzZQXduTmbB9jX9Sjjt6cDeCyG0x1HeTXrNjj9siOJLa61oWtZYHf35Acpf2aH Eda3IkgRldu8qsWV6cIx5BtEd4JYHI3ydg0MUtPxv+xITDmmtAQ= =aB1A -----END PGP SIGNATURE-----