-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 21 Nov 2024 16:12:03 -0500 Source: chromium Architecture: source Version: 131.0.6778.85-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (131.0.6778.85-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2024-11110: Inappropriate implementation in Blink. Reported by Vsevolod Kokorin (Slonser) of Solidlab. - CVE-2024-11111: Inappropriate implementation in Autofill. Reported by Narendra Bhati, Suma Soft Pvt. Ltd - Pune (India). - CVE-2024-11112: Use after free in Media. Reported by Nan Wang(@eternalsakura13) and Zhenghang Xiao(@Kipreyyy) of 360 Vulnerability Research Institute. - CVE-2024-11113: Use after free in Accessibility. Reported by Weipeng Jiang (@Krace) of VRI. - CVE-2024-11114: Inappropriate implementation in Views. Reported by Micky. - CVE-2024-11115: Insufficient policy enforcement in Navigation. Reported by mastersplinter. - CVE-2024-11116: Inappropriate implementation in Paint. Reported by Thomas Orlita. - CVE-2024-11117: Inappropriate implementation in FileSystem. Reported by Ameen Basha M K. - CVE-2024-11395: Type Confusion in V8. Reported by Anonymous. * d/patches: - upstream/wayland-gbm-pixmap.patch: drop, merged upstream. - disable/catapult.patch: refresh. - fixes/bindgen.patch: refresh. - fixes/freetype.patch: add new patch to fix missing enable_freetype arg declaration. - fixes/updater-test.patch: add simple build fix for deleted third_party/updater/. - upstream/stack-header.patch: drop, merged upstream. - bookworm/clang16.patch: refresh. - bookworm/bubble-contents.patch: refresh. - bookworm/constexpr.patch: refresh. - bookworm/gn-absl.patch: add a few more places where libs needed to be made visible. - bookworm/gn-funcs.patch: add another deletion of newer gn features. - bookworm/constexpr-assert.patch: add patch to work around more clang-16 constexpr bugs; this time a fun one with branching optimizations. Whee! . [ Timothy Pearson ] * d/patches/ppc64le: - workarounds/HACK-debian-clang-disable-pa-musttail.patch: Work around additional upstream musttail definitions - workarounds/HACK-debian-clang-disable-base-musttail.patch: Refresh for upstream changes - third_party/0002-third_party-libvpx-Remove-bad-ppc64-config.patch: Refresh for upstream changes Checksums-Sha1: 64a2e9570ee6297bb060fd8676fbe1e7bde297d1 3812 chromium_131.0.6778.85-1~deb12u1.dsc 5d6b15ba05bff55b2035406a37f5c6d4a6cdb95a 842806384 chromium_131.0.6778.85.orig.tar.xz cea79ebd09e1f13d47940da4ee35f9077e91258f 8499784 chromium_131.0.6778.85-1~deb12u1.debian.tar.xz cbae3553e5f0f05ca3b936f49c2342bd307835c5 22111 chromium_131.0.6778.85-1~deb12u1_source.buildinfo Checksums-Sha256: 341a2f862bf65edb8e05b41afcf34b78370f9e2bfd740543b489cfac3fd918e9 3812 chromium_131.0.6778.85-1~deb12u1.dsc a78b4c3c53eef0ca396f1ee2163bbaf4bc6e2b4670e832dad6a0a2c5b330e8cc 842806384 chromium_131.0.6778.85.orig.tar.xz 64394d82413ad71bb5d9d479058e8764cf48ba338acac5a86f8066449cb93a7f 8499784 chromium_131.0.6778.85-1~deb12u1.debian.tar.xz 9a49fb6198be2694c6af13909b5b79290541cc83c6d9463420cf0a84b7b68dc3 22111 chromium_131.0.6778.85-1~deb12u1_source.buildinfo Files: 14b4ca8a44ae4ceed0535cc6d23ede4e 3812 web optional chromium_131.0.6778.85-1~deb12u1.dsc f060399b3842267b01d7f20429baea23 842806384 web optional chromium_131.0.6778.85.orig.tar.xz b029acbaf41b6a66ed403462ca783c21 8499784 web optional chromium_131.0.6778.85-1~deb12u1.debian.tar.xz 56312befa1e6a10095aada45419fb594 22111 web optional chromium_131.0.6778.85-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmdBFLIUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjfvjQ//aP1oGxKX2/ECGSBqJZJxRN5PZQFg pAhYgi1K1BKQ+oJz4v9ho53lk7wkZ0r3WPYr95svu9DLsFkRASgtpo5/+NuFXlEO Vg66h0ligWBN4KwK5cI9L5n2fKTDyqYhfzppgYPTMeCkqbBwEkDz3YlS1ZFgdljt FThz/Xmoz0xv4KEo2OuLEvdnoNRmaVBnnj1GBGJlgW9Ant5281A98LF43bKT8s/G He2CAFYiEVa8t/VUWmN5M+w8azmjIPguexYyg4+KgzO74SgxWrwtDkdUW4wMwKu6 nUGjdF3ovWVGrKvxue0Yr0mI1LEu6cfaNw37LJNvjAt2rVNXFE7shGirxPz7nmuL SjRZDIx/vqQ7U13pnKk6J8rh/XL+W19EoorIUgfvfy4WMpeDQAKvfG9E+osikpwA nki99qNOCt+UAL89ny3JAEDGE9PedG/QG4W5QC1pHIApctT/ANPEO6qgN82Mbf0L 6mjnRwgN6vAQVQY7QJZdub+MMxklBCHdv53rJBjE2uAWE5ZtilBtabIDvo9i97F1 Nkkpg+bLYpR60RCVGEdxneZaion7tYiHxtHAJfQfdpgE2Yf/iqlUBxqAr5Zp+YIn r9qFM7yqYy2t/XOI3NscKxm5r8biGhptgVRTUoVD18wxLRhGY3EkoVjISVznRw9/ JP5OYnz9Lmtwx+4= =hNrN -----END PGP SIGNATURE-----