-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 12 Dec 2023 19:52:08 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 120.0.6099.109-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (120.0.6099.109-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2023-6702: Type Confusion in V8. Reported by Zhiyi Zhang and Zhunki from Codesafe Team of Legendsec at Qi'anxin Group. - CVE-2023-6703: Use after free in Blink. Reported by Cassidy Kim(@cassidy6564). - CVE-2023-6704: Use after free in libavif. Reported by Fudan University. - CVE-2023-6705: Use after free in WebRTC. Reported by Cassidy Kim(@cassidy6564). - CVE-2023-6706: Use after free in FedCM. Reported by anonymous. - CVE-2023-6707: Use after free in CSS. Reported by @ginggilBesel. Checksums-Sha1: 0406e510fdc7cba004fb50bb06a72f9e14340d8e 1157380 chromium-common-dbgsym_120.0.6099.109-1~deb12u1_i386.deb c73a5c955af8c71a27eddf00bd65c1fa5ab1d7bf 4949748 chromium-common_120.0.6099.109-1~deb12u1_i386.deb b79c8001d5fba055df441a53c50036913f726e39 31729348 chromium-dbgsym_120.0.6099.109-1~deb12u1_i386.deb c2d51141e97d36938dd263e53ca275f3189c7bff 6134444 chromium-driver_120.0.6099.109-1~deb12u1_i386.deb f1949dd67836bf3983deafc38432c7964e2683d7 13956 chromium-sandbox-dbgsym_120.0.6099.109-1~deb12u1_i386.deb b5cb9dbfe91f2b96fa45bb25ea86d89bb2878cf1 84760 chromium-sandbox_120.0.6099.109-1~deb12u1_i386.deb 9d1506a8679bcfbb52640be34a0b15f128bb8d7e 26969668 chromium-shell-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 14345ec5071699a773b60a31a8592d0233f71593 51085992 chromium-shell_120.0.6099.109-1~deb12u1_i386.deb 1c6339b7b216de812d9eb8da7cf79dccdb2a3bbc 24542 chromium_120.0.6099.109-1~deb12u1_i386-buildd.buildinfo 8626643b7ad26dd533d1465c0bba603565ce533a 73706512 chromium_120.0.6099.109-1~deb12u1_i386.deb Checksums-Sha256: c26cf389464c28d3a409291bcd66c5b2cb21dda30b7839a1d896ac6801486984 1157380 chromium-common-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 95b3374e6c00b3a736033486ea7bc0215c299f24cae8c7fa9a8e062b90aa1956 4949748 chromium-common_120.0.6099.109-1~deb12u1_i386.deb e9c3ec9d3620dce0b58b2829ae184e0fe9230743ce469dd64be47f480dae28b8 31729348 chromium-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 3438445447592eea03c9a66818b751d46b556c2020b5e99da528f1f9fa1d5c13 6134444 chromium-driver_120.0.6099.109-1~deb12u1_i386.deb dda45d8e22a7199ec6f7fa906b3813676c0814ee108a078ca21069af5af4db3c 13956 chromium-sandbox-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 55a35fcee3fd16c5413a2c3c759b12f02953600db8954ddbc5e5ccc7d695bf81 84760 chromium-sandbox_120.0.6099.109-1~deb12u1_i386.deb 8b3bee0d967ccac47a9d87ff571b8af27bb9996e1ea35f8ecc1819857b64e6ad 26969668 chromium-shell-dbgsym_120.0.6099.109-1~deb12u1_i386.deb d9fd4f7a60c7d238ca76bc011db7110a1116afb3b275aa80c8e2dc79698ae4e3 51085992 chromium-shell_120.0.6099.109-1~deb12u1_i386.deb b6c65961314ddf558f56b6c5b57d07b7186f5250c54e182d91b4305222adbcbd 24542 chromium_120.0.6099.109-1~deb12u1_i386-buildd.buildinfo cb1e691302ed48ba2c00cd79e2fd90677b93fc52d544c00e7eb86e88d18cd528 73706512 chromium_120.0.6099.109-1~deb12u1_i386.deb Files: 3793ba8e9f71480587edca2a33de7002 1157380 debug optional chromium-common-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 75122c2f64319894d4f02ccf5753110d 4949748 web optional chromium-common_120.0.6099.109-1~deb12u1_i386.deb c60d666b9e03672857ada3e57eccd5a6 31729348 debug optional chromium-dbgsym_120.0.6099.109-1~deb12u1_i386.deb 1ea28eab8b9a62e53235ea70febbb897 6134444 web optional chromium-driver_120.0.6099.109-1~deb12u1_i386.deb 7b0cf4e650ff0ee34d983ea46aa68cef 13956 debug optional chromium-sandbox-dbgsym_120.0.6099.109-1~deb12u1_i386.deb f29a05ed8b6fd692ed729cabcfaff3e7 84760 web optional chromium-sandbox_120.0.6099.109-1~deb12u1_i386.deb 1996b957f1f1abff68b4bee2d449c082 26969668 debug optional chromium-shell-dbgsym_120.0.6099.109-1~deb12u1_i386.deb bfe10e654172de1a556e1ee2d1934048 51085992 web optional chromium-shell_120.0.6099.109-1~deb12u1_i386.deb b59603372a45891b4316daadcb06fca4 24542 web optional chromium_120.0.6099.109-1~deb12u1_i386-buildd.buildinfo 706ce64af5392ae294092061fa5387c8 73706512 web optional chromium_120.0.6099.109-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOtJZa9Q/HRv7PgxxkF7E12VCox0FAmV6AdEACgkQkF7E12VC ox0ryA/9Fp8piBBpRFODVtTKufdj9kv1eZKkC1fiJbdH1PJ7oKdgBINhkqfKeBGI WFmniWN7IsnPOZuYDw4EWcov5ercLXJTC1onkIhu2soFLxUbsYsPgQrlHAqRIq1p 8gSiJNjMOOWVskyzESuvXf+QOHNqQwJ168pffmF6vMZ2goSeEdi9zcEcYrQvYG9N s1CESS0x4p791rMR4NJUSZ+inYrnsWsAFNQCrT9fi3kg8UTX0iW6tHqRNXImCeRl RMJvTE5KE24TiUckQ7p1c7GDO01K9hsVEhzxCG4+dXYiadxwpbnAj1QO1jqmbO1i VoedPP+cIlIiAfT/TD8hxdhFkUfKRk4fa/pzWtjspl3jvWoUYQd+eSqoADkLs3vz rvHaCs06GZK49rOOcNvGXiezwsciOy/DzXXk4YFMJJ3W3kHcNkir++2xdLOL+D6P eM8GY60OD/ith8Oo8X/GeciNqDCfphOvd0osDBOxH+W5iQmtBu4INPSFPfsW2+KL /tMBjto4A25lExHrZGvBZu6vMEA6/WDEc2ut3SrPv2Igz8U8uTEjv5q5qhZu6l1W sBYLsGmjRiGLlOVDCJ5CrVjcql/37DS6qGF7jotR9Lwpx5QLcxB9k6J1pVxVxU9a EzSSLwbdSBDM39mYQgogfmgHmY/MLOu5r1vXxUMXHIsKk4Wx2/M= =mYiw -----END PGP SIGNATURE-----