-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 Mar 2024 11:57:05 -0400 Source: chromium Binary: chromium-l10n Architecture: all Version: 123.0.6312.86-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Timothy Pearson Description: chromium-l10n - web browser - language packs Closes: 1067886 Changes: chromium (123.0.6312.86-1~deb12u1) bookworm-security; urgency=high . * New upstream stable release. - CVE-2024-2883: Use after free in ANGLE. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-2885: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-2886: Use after free in WebCodecs. Reported by Seunghyun Lee (@0x10n) of KAIST Hacking Lab, via Pwn2Own 2024. - CVE-2024-2887: Type Confusion in WebAssembly. Reported by Manfred Paul, via Pwn2Own 2024. * d/patches/ppc64le: - fixes/fix-clang-selection.patch: select clang on ppc64 platforms - ppc64le/third_party/0001-Add-PPC64-support-for-boringssl.patch: fix ARM builds. . [ Andres Salomon ] * d/patches: - fixes/bad-font-gc1.patch, fixes/bad-font-gc2.patch: revert a pair of upstream commits that result in blink's garbage collector frequently deadlocking and crashing (closes: #1067886). Checksums-Sha1: da6825d4ed07db96aea50ba8cf40a851f7898089 7093612 chromium-l10n_123.0.6312.86-1~deb12u1_all.deb cc9c58730db51e85c22c75d0a7d99db95fcc8802 21829 chromium_123.0.6312.86-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 2e2ff48e188d36ba89b898a2c73e1b7d745fe54fbce3dc1173b79ee796ec5ec7 7093612 chromium-l10n_123.0.6312.86-1~deb12u1_all.deb 3714715793c627a3a0a9746a5c0e4cf36d8c2f5de1952f48b8f33796d2f560b3 21829 chromium_123.0.6312.86-1~deb12u1_all-buildd.buildinfo Files: cf2fa1301da0688bf89ad1d78b08040e 7093612 localization optional chromium-l10n_123.0.6312.86-1~deb12u1_all.deb 1b2ece3f81d2d1e5fb8aced7ddae3c08 21829 web optional chromium_123.0.6312.86-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzW1K1578DQd6MDTQEbLkkg2OS0oFAmYF8pYACgkQEbLkkg2O S0pDZw//dZyeHnBfYS+lD+7Zb6Ih2KUw0V+LCJsYwcaT+SU4zwtLknNq2IJJkUgp ZlNaUn5Qj3/ttooCgv+4eQXjMkGeLWDnsKDAqDQOajIBjGMZTKHfrn5J9lLtDXXS aDxl0fcbdEmgvBGpsDj5bSb1W/hSXu/fWXbP7Q6Xqs3p1jrxPgFRGGYTurjDJizL sbWQMR0Md4Dnww9kv51s6zM6ldkLmH3/8ltiwdDS+VB40OTTu04UCjxGFSxJXpls 4M2hCDMwTF16tF6KAFpuOXSvYK2F4AXW1b7CRQQqr9yF0dUF77qftrne7xopkwbK Pa8xhvNZQFv367HLcnjFsZaAFlvTOU+eD6tKTkKsUuDHJztK66I4Z6m9UOBVTLos D08SyThG7wbdrZEOMEHEYQc0pu4wXrzV9yAoHUwESPrAcUBMZmD99hKQpDKPdr6/ GjYLXe5/Vo09xjwxnDf/B3IY7nF0+a89a11q+kqwegsRlURmbyLdEHqUZl7ih96+ ctEf7Cq0uVTnfw3ESQiK0bKWhWKHlsiGw0H/gSeAL/Pj6ln/HcVTkpH9jE7F+E1U 1ycZa7nWBqRutkLmigBa4pvzTS3gls4ufkbRnTgVgXHXFVndO8fwOAvxUTkleZug m6WwKkK1enw1AMiCTy6jcgjrkW9osCR6AlffsJM/6r1/GuKB75w= =MVES -----END PGP SIGNATURE-----