-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Apr 2024 17:53:52 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 124.0.6367.118-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (124.0.6367.118-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-4331: Use after free in Picture In Picture. Reported by Zhenghang Xiao (@Kipreyyy). - CVE-2024-4368: Use after free in Dawn. Reported by wgslfuzz. * Build-dep on libhwy-dev and delete the bundled third_party/highway. * Build-dep on libharfbuzz-dev and delete the bundled harfbuzz-ng. * Build-dep on libdav1d-dev and delete the bundled third_party/dav1d. * d/patches: - ppc64le/third_party/0001-Add-PPC64-support-for-libdav1d.patch, ppc64le/third_party/0001-Fix-libdav1d-compilation-on-clang-ppc.patch, ppc64le/third_party/0003-thirdparty-fix-dav1d-gn.patch, fixes/arm64-ftbfs.patch: drop these 4 patches that are only needed for bundled libdav1d. - ppc64le/third_party/0001-Fix-highway-ppc-hwcap.patch, ppc64le/third_party/0002-Highway-disable-128-bit-vsx.patch: drop these two patches that were needed for bundled highway. - upstream/ozone1.patch: drop, merged upstream. - upstream/ozone2.patch: drop, merged upstream. - fixes/bad-font-gc2.patch: refresh. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0001-Add-PPC64-support-for-boringssl.patch: Fix inadvertent breakage of i386 build Checksums-Sha1: d2dd43713af393a076e3cbd1dc33aaaf6a703054 1263460 chromium-common-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 0fee852899db5f0ba1ae76e75752227812d9146d 5301676 chromium-common_124.0.6367.118-1~deb12u1_ppc64el.deb 2dfe637814a801d46ae6232f825c70847aa8ceaa 28872844 chromium-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb ee792452282105ce0f15f47ebc1d48988b408ea7 6639980 chromium-driver_124.0.6367.118-1~deb12u1_ppc64el.deb 3bb6781585712f1a358f7dedd4ba0ef3ccd5a952 14296 chromium-sandbox-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb a4432cdffd0150a7708cd7f630f3c78c51b974ba 89536 chromium-sandbox_124.0.6367.118-1~deb12u1_ppc64el.deb e557093ac64cf864e823f826d33e9e72f2ebb6be 24127396 chromium-shell-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 08667d0aa549e918aaf9898fd5802afe37e85e84 51902236 chromium-shell_124.0.6367.118-1~deb12u1_ppc64el.deb 169dcac2df5be66bde372d133ba3887c5821890a 24624 chromium_124.0.6367.118-1~deb12u1_ppc64el-buildd.buildinfo af439f71b3024f8fa22b9bded5eff7db8c3bc677 73892700 chromium_124.0.6367.118-1~deb12u1_ppc64el.deb Checksums-Sha256: ecd5f8422b5dd4c6dccaecf931ace85b4b1d6f2c648f6f308d0cc641c91f5353 1263460 chromium-common-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb bb9b0eebe6d088f4b77e966a10c3adaa5cb36b01b356bdcf2f819022cfaf2dae 5301676 chromium-common_124.0.6367.118-1~deb12u1_ppc64el.deb b4e2e132cd95fd5ae59e526a9d53198b1bebd32cfebf78e730669dd56d4a9977 28872844 chromium-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb e7125680e99df3891822a91b51a7bd7a23410d8fbb39160ff610a5e9c174a705 6639980 chromium-driver_124.0.6367.118-1~deb12u1_ppc64el.deb 7b2e6c75be00b6fd9646d2b4591688ccee7438f97ef6e6c80e93e873e03cc332 14296 chromium-sandbox-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 645e9691ccdecf4467ac174b79c89a913ee5fb5f9bf9f2f66bf74191dc9a825f 89536 chromium-sandbox_124.0.6367.118-1~deb12u1_ppc64el.deb 50cacc112dba710331ff0066cb12b0b653061e765f825b0bf1061d3e174be05b 24127396 chromium-shell-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 67c665402020835ce3ad6d33da95a0deeb8a6656fef920236e8c2cbf0befe53b 51902236 chromium-shell_124.0.6367.118-1~deb12u1_ppc64el.deb 9b26f7f674d89d4232db0aee6a8c7e353e9c65015a3d911e3ec41902296a105f 24624 chromium_124.0.6367.118-1~deb12u1_ppc64el-buildd.buildinfo 2918fee5c79128ecf60b7d7a2d6d6482dfdb22c7c260f14e8b88caf04d019470 73892700 chromium_124.0.6367.118-1~deb12u1_ppc64el.deb Files: 95d361eb1df24e414a4194bd8b364960 1263460 debug optional chromium-common-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 4ef287b3031732400d17d8a1efd98a40 5301676 web optional chromium-common_124.0.6367.118-1~deb12u1_ppc64el.deb d83cffbd0b0303d8e3bad1e40786701e 28872844 debug optional chromium-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 79510266b74bceb764b05d2b0793ae1a 6639980 web optional chromium-driver_124.0.6367.118-1~deb12u1_ppc64el.deb e8a7c737ccbf4baa54ef819b324b83e4 14296 debug optional chromium-sandbox-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb 163440e3e9a0f0dc122727b773f8ca6f 89536 web optional chromium-sandbox_124.0.6367.118-1~deb12u1_ppc64el.deb 2cd3c5ca45f0d6e3db84bb5c82a8505f 24127396 debug optional chromium-shell-dbgsym_124.0.6367.118-1~deb12u1_ppc64el.deb fc77823b3c5fe1cce81081281782b8ed 51902236 web optional chromium-shell_124.0.6367.118-1~deb12u1_ppc64el.deb 047a0267ea3f2c005d4ca6979c242501 24624 web optional chromium_124.0.6367.118-1~deb12u1_ppc64el-buildd.buildinfo 345e4918a9151e8e513b78ef630a2886 73892700 web optional chromium_124.0.6367.118-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5hbnFkJlczvLwwS0Y7DdE4sWZ/UFAmYy7uQACgkQY7DdE4sW Z/XxgBAAhN6Fww9g1YZQ6t1xg+4vYj8MWmPHWuHeNh0Vpe1oiYSN+2fXE0ymRggU x6fiLJ6n6DH9wS96IH4xCavmPm7r9At4Ucaw4j2LIlg1K3wWvEWKlvSsJga3nH/I rG0ZrJ0YtVEKv0aT/5lWyMK0P4kFtOWlVpGNJvJ6u0Pt41cHcUZAyJj23fIoE4i2 fj//B3GyF0OzD52NJq9V0jBRmTPxZNpCMny/+vrKpWPGaNARA9BUFI4hahHawb/d 6796t6H+OkRMg2X1FckJ7yUoR/cxjV9kt5u/qGJr3AAK+M5cC/cWLj4zmU6k5Nhh BSbAj58tdv0figMqJZ++A58WOvVbwqWPH0tW9vGFpUZavbVqHaxQeY28g/I00Y0a va/5L6Ds9TaWwU35DuaXc5QjUI/+8R6g1onU1mj90w4MPTqD8Y2OERSZECmYKMSj jUWHP/eLGkujFo499X2VSUq12vf15qki1J/HWvhyxQUlixcNPLIQ8xBZ4ee0LGZn X9wj6uXgV8sXeA94BUu5FQvEK9iJJfysQczBIlwLZxH4IlwRp4rHh67dtw59dbrc RC0VzY3K8L+C1dJ8KAmi6t7bokl/uf6xJ9CsayX4Efq0slnb+X9Xly66WqPN7IAd H2FmMCkFQTgbpGMH2RkyUdhfNuQWTWf3m/WcP4tsu1/ZrpVlIwk= =22oM -----END PGP SIGNATURE-----