-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 Dec 2023 11:40:41 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 120.0.6099.71-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-arm-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (120.0.6099.71-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2023-6508: Use after free in Media Stream. Reported by Cassidy Kim(@cassidy6564). - CVE-2023-6509: Use after free in Side Panel Search. Reported by Khalil Zhani. - CVE-2023-6510: Use after free in Media Capture. Reported by [pwn2car]. - CVE-2023-6511: Inappropriate implementation in Autofill. Reported by Ahmed ElMasry. - CVE-2023-6512: Inappropriate implementation in Web Browser UI. Reported by Om Apip. * d/copyright: adjust path for chai.js & mocha.js deletion. - delete third_party/libsecret. * d/control: new build depends on libsecret-1-dev. * d/scripts/unbundle: keep bundled libhwy; it's not available in bullseye. - also keep vulkan_memory_allocator and flatbuffers. * d/patches: - fixes/gcc13-headers.patch: refresh. - fixes/blink-frags.patch: drop part of patch & refresh. - disable/catapult.patch: refresh. - disable/driver-chrome-path.patch: update for minor upstream changes. - ungoogled/disable-privacy-sandbox.patch: update from ungoogled-chromium. - ungoogled/disable-web-environment-integrity.patch: update from from ungoogled-chromium. - upstream/mojo.patch: update patch from upstream's git. - bookworm/clang16.patch: new patch working around upstream's clang18 flags. - upstream/nullptr_t.patch: more libstdc++13 build fixes. - upstream/string-include.patch: add a simple header include build fix. - fixes/absl-optional.patch: add a workaround for a clang bug (https://github.com/llvm/llvm-project/issues/50248) by providing our own 'optional' header. - bookworm/constcountrycode.patch: add workaround for older libstdc++. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0001-Add-PPC64-support-for-libdav1d.patch: refresh for upstream changes - third_party/0002-third_party-libvpx-Remove-bad-ppc64-config.patch: refresh for upstream changes - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: regenerate - third_party/skia-vsx-instructions.patch: refresh for upstream changes - third_party/use-sysconf-page-size-on-ppc64.patch: refresh for upstream changes - Mass refresh all other patches against 120 codebase. No functional change. Checksums-Sha1: 4dbd08da5638244a883789e216ae48e83f77ad36 1262220 chromium-common-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 78f79e6cf61164e51cdb33440425c17a55c67a0b 4813224 chromium-common_120.0.6099.71-1~deb12u1_arm64.deb bc395e797d63e7e942b16280c027dfb83c57edd9 32675312 chromium-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 2361f56cb9f19a6b134bb7ecbdf7b4381fcc324f 5392948 chromium-driver_120.0.6099.71-1~deb12u1_arm64.deb 4998f3711eb4eb3cb8b680c8380d2384815e1bb1 14468 chromium-sandbox-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 98461c1f050e582c600644589e0d450dd9b3dd88 84688 chromium-sandbox_120.0.6099.71-1~deb12u1_arm64.deb e5df653552e112f8a18d12a5e6722a5c39fbc58a 27057140 chromium-shell-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb f86f5d58bafde6fd933a029733f039fadae71f00 44411340 chromium-shell_120.0.6099.71-1~deb12u1_arm64.deb f70ef0fcffe462977278d54bf5b9a9bd81267b3b 24427 chromium_120.0.6099.71-1~deb12u1_arm64-buildd.buildinfo 2344449c2c65f89c2059826205580ec01b9023e2 64440412 chromium_120.0.6099.71-1~deb12u1_arm64.deb Checksums-Sha256: 150f210cb5d080d162571722efb5c7b400cd72bd16b8ac2d04ea76ee6b4a9192 1262220 chromium-common-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 52ab58489c443d62d73c831c842920c3430dac61f597b317a58449b7ed2271f8 4813224 chromium-common_120.0.6099.71-1~deb12u1_arm64.deb 014dd4736bcccf08a26667d9dc7dc00ad3987a57a6a0588701165c6df1dd774f 32675312 chromium-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 930b375e25dcc996847daf38628598ea78dd2969adc80d59ec61afa1cfa85f5c 5392948 chromium-driver_120.0.6099.71-1~deb12u1_arm64.deb db50a1335186b342ef2b4bd13424ea4434445eef966c6236b92a5a5a5889b08b 14468 chromium-sandbox-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 0825e88764ec48fa649fb7842737b1e3198b17ff93e85e42c60c533af3823ece 84688 chromium-sandbox_120.0.6099.71-1~deb12u1_arm64.deb 188b7090bc700f4bcf51d68e66673bd8873235ffa84c7099d3c2ad76368a30dc 27057140 chromium-shell-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 5c0c1697de19cb939461d23228f22235008e50c0884b629527444a190d0477de 44411340 chromium-shell_120.0.6099.71-1~deb12u1_arm64.deb c5910ce255cb1ad668247ea7d8498c365ae770f60298967778b38ccc61784725 24427 chromium_120.0.6099.71-1~deb12u1_arm64-buildd.buildinfo f9f1ea6a6794f557ec19cbb4b27743d23dcf9c52ad634b25efd9e3e10faf4914 64440412 chromium_120.0.6099.71-1~deb12u1_arm64.deb Files: 3b9d245d74a93a637bd96d3c4e92c7d3 1262220 debug optional chromium-common-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb cf89863287472bbcba5546eebfd50122 4813224 web optional chromium-common_120.0.6099.71-1~deb12u1_arm64.deb 1acd012a5dec686bf3f33e6b5d0a28c3 32675312 debug optional chromium-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb cfde7277fb0486e9cf253d395fd105e1 5392948 web optional chromium-driver_120.0.6099.71-1~deb12u1_arm64.deb f91f350eb9836e76b2a43289cecb6b0e 14468 debug optional chromium-sandbox-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb cf987579d19413c2f3b916270d0cde0c 84688 web optional chromium-sandbox_120.0.6099.71-1~deb12u1_arm64.deb 7ec9a07fdc91e0993596aa33f14b43d7 27057140 debug optional chromium-shell-dbgsym_120.0.6099.71-1~deb12u1_arm64.deb 434de11f18d9834a269f9d35581621f9 44411340 web optional chromium-shell_120.0.6099.71-1~deb12u1_arm64.deb b5e2803427da23f1d6c1e1f319bc5a11 24427 web optional chromium_120.0.6099.71-1~deb12u1_arm64-buildd.buildinfo b32da8c81f0e08acf96bf0c165a5d1df 64440412 web optional chromium_120.0.6099.71-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExwLooY4pOBEnRvQOhwvc65q7iiUFAmV1AscACgkQhwvc65q7 iiWrQQ//WBH3f43v0GkRTuibRAkNWp1YdQiJaaso+G1sxzf9kyB7waqNeYePjuje 87oj7ps1plvq5aGQFMAbGk6bqeJOxNnzoRwEjHOYmviNTCl+ucoqOGR6w3Qa4R5S 3iSj2bQB74xCnQAMX/sEQ2M2bp2viFoZJHS/xcmUwBA1yHm2ezjWejsX9eZ02qi4 iwOoCpSiO2gUjtXr/RCmRAMDtakN6n/w0uiyIXKPXlzBbMPh9yb3kUQjL+aqXZUR MTQoz8onVGymA69g3ZgGSBAgl7rcRIxpNHhh/Rkn9ncT3y39yLvSVIV1TAJtktCm tpTwlAo2QddndKqecljoE651O54NKM0e3ROomXyZ98kQgQkijnrIQ0X4+0oPgU/K ti2mlPmdGCxb5th5t5ybA2ABca2S/Yqfqv6bH9+DwGAzJbKmTaFn52hrXNiaoNXf M/Hyoral21wrnZ5gfjOoY9h+q5CNzWIes8iThcTFB+Xd1Q2zjcX6F76qpt784vzU 70/TPfVt1pSeVfhpX+BcN5kb3GF56MPDMsc3d4sL2c3zr49xPePpwt26bhFeJf22 y1OBED5xxQCCyQ9a2LPMAog8Hz6PAXqyauVw5LryK2JNSKI2VY7u56S4275fb6ED 2j/Owu9bZGZf3IJckwPD5JHsS1QxPOO8TkRhbWIRJD2kYBxgCtg= =eK/B -----END PGP SIGNATURE-----