-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Dec 2024 16:52:56 -0500 Source: chromium Binary: chromium-l10n Architecture: all Version: 131.0.6778.204-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (131.0.6778.204-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2024-12692: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n). - CVE-2024-12693: Out of bounds memory access in V8. Reported by 303f06e3. - CVE-2024-12694: Use after free in Compositing. Reported by Anonymous. - CVE-2024-12695: Out of bounds write in V8. Reported by 303f06e3. * d/patches/fixes/absl-optional.patch: comment out __glibcxx_assert() that we keep hitting with gcc 12; it was previously commented out, but we lost the change when we switched from libstdc++ and then back. . [ Bo Yu ] * Build swiftshader with llvm-16 instead of llvm-10. Checksums-Sha1: 87f546bec3b4b53b4e43c30bb59eaa1f0b552e25 7826100 chromium-l10n_131.0.6778.204-1~deb12u1_all.deb 9f404ee77364f6278d3b7f42ca4f63b61e4efca8 21987 chromium_131.0.6778.204-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: bc0445e2e46b437b06e93f7842b092e13b52a43b9f422f33c770573caabf5b66 7826100 chromium-l10n_131.0.6778.204-1~deb12u1_all.deb 603422e57b25b9e834273fbbb5a0b4d8cc6646dc4bcd8bd5cfc55eb826b6cd3f 21987 chromium_131.0.6778.204-1~deb12u1_all-buildd.buildinfo Files: 2cc66e61575a4bdc594d7d20a857fad6 7826100 localization optional chromium-l10n_131.0.6778.204-1~deb12u1_all.deb 0437a6d7c0babed603d315e547f65443 21987 web optional chromium_131.0.6778.204-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzcbx6nIE/ydHa1FFigL77i1GSVkFAmdky8sACgkQigL77i1G SVl3+A//f+2V9E6YLHzEHE9Ygl3BqK+GYx4HYj3h5sKxbM9hLNqIOKM6Rez/1xiZ KjlivEbG6WUp+BqFRHKEY+2YG4l6BwQyXnzbRQz+q0sdUU8D9IkaV5XwWglfjJwg S1eUwmJd/m0GSOLEM+cF8j9aUoI5DIGh9JvA1S9+mIhuTwsPHe4p2w7R8Mq1k+Gr y+fCGAU5y+7LAVszce0O5QmsH5Tdo6yCvfVlY8nSuOTil2yoGEiqfNqiXE3ZAOU2 f71UzX4VJw7MSUukFPmINmhGnu7kl/EoEhNIZtM1iCP+8v/+ChpeajLSVw4JSqNX f5DEP2+baoZ48BptudGXa48TcWX6GfK8W0+FLlsFchpoxNR4g6fdUIX2yD/3OTyf zhfHw8LgV10VUE48wwJwrG3HrnLxJioDQ0uxtb3hBQXhPHN4WuJadE82pSrqUnhq EWuKqoCHqn2gmX9YpvJsfYDlfhAw+DVo6bGDO7Qs5eTcnaBb6Akp2gjg4eqbpqvP V8MTxqwU7E4fWFr0LJCuaaENZDl3E4cGM7tJ/nx6yqRN/JjWv77FejawFfYXhYnF z3eEIi83sq6FMdcl5N5w8IHpr4g5Zeb3rs9d7TZMVlKVgrPwtQn9fDPGgpoES2RG puqtkZT0mBOeLkCT1GI2BLZ0T8mE58EAb5hj/v1a79TgIJPO1uI= =yxHQ -----END PGP SIGNATURE-----