-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 Mar 2024 11:57:05 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 123.0.6312.86-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Timothy Pearson Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1067886 Changes: chromium (123.0.6312.86-1~deb12u1) bookworm-security; urgency=high . * New upstream stable release. - CVE-2024-2883: Use after free in ANGLE. Reported by Cassidy Kim(@cassidy6564). - CVE-2024-2885: Use after free in Dawn. Reported by wgslfuzz. - CVE-2024-2886: Use after free in WebCodecs. Reported by Seunghyun Lee (@0x10n) of KAIST Hacking Lab, via Pwn2Own 2024. - CVE-2024-2887: Type Confusion in WebAssembly. Reported by Manfred Paul, via Pwn2Own 2024. * d/patches/ppc64le: - fixes/fix-clang-selection.patch: select clang on ppc64 platforms - ppc64le/third_party/0001-Add-PPC64-support-for-boringssl.patch: fix ARM builds. . [ Andres Salomon ] * d/patches: - fixes/bad-font-gc1.patch, fixes/bad-font-gc2.patch: revert a pair of upstream commits that result in blink's garbage collector frequently deadlocking and crashing (closes: #1067886). Checksums-Sha1: eaf344adf427755c9d58367a193135ff057035e2 1255888 chromium-common-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 8d8f139df33675b42d50f1d2dd94e8bbc22cac13 5246028 chromium-common_123.0.6312.86-1~deb12u1_ppc64el.deb f15ad6429036dc3fc2f070a3bdd6a789f8c106eb 29377104 chromium-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 7f738e6d4204c347705c6a4a1e64365a52956b64 6524116 chromium-driver_123.0.6312.86-1~deb12u1_ppc64el.deb 213825fc7f9a350b0188cccb91f0113825566cac 14308 chromium-sandbox-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 4d4bec82a09f68081dc8ab3312aee05f77e4cc4e 87960 chromium-sandbox_123.0.6312.86-1~deb12u1_ppc64el.deb 7d712ac4aeb846d67a24d6da05c1aaaa0d1f684e 24643692 chromium-shell-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb c9afbdf0472b72c9f616d08fc01e55e0d2d4dc7e 51659668 chromium-shell_123.0.6312.86-1~deb12u1_ppc64el.deb 570e33411279526c9078211639a80eebd5a25c11 24457 chromium_123.0.6312.86-1~deb12u1_ppc64el-buildd.buildinfo 41dea2a77ac6e763328df92ec1e4977f8434df8b 73662908 chromium_123.0.6312.86-1~deb12u1_ppc64el.deb Checksums-Sha256: 068226777804ed7557950d8b48e5ad6df59bd02f600b8ac9bfc51cbf8aad4534 1255888 chromium-common-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 98502c3fd313c9991671761ac0522950b5496a35509ab3d10ac9d70b0510bf24 5246028 chromium-common_123.0.6312.86-1~deb12u1_ppc64el.deb 137eefef647e26c2d563bfc0e5d84e45d89e72457af471dae24fa7dc9523d992 29377104 chromium-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 9dad86d259870512a2bd799e7896ad2f34e7148a18bf12b4b0aa029a13d8f2c9 6524116 chromium-driver_123.0.6312.86-1~deb12u1_ppc64el.deb 43ae227af987e039bf18507f41ca15aab12994aa59ee5b6cb1073c414336cf25 14308 chromium-sandbox-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 47880eb8f502dac7dce5af0f7e0e992e02fabaa4530b09c5d90d32fd976263b5 87960 chromium-sandbox_123.0.6312.86-1~deb12u1_ppc64el.deb 54a8a5bfc9eedd0fb6521f5f5e840854a405473e608a25033a596ac1c7304d71 24643692 chromium-shell-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 29a790aee17a16c205c773a46b75009df0c338671acf90ea04ff0c8daa367ae2 51659668 chromium-shell_123.0.6312.86-1~deb12u1_ppc64el.deb 2ecb6805e1aed8367fa5d57ef2d5290d5f2fa22e8efe1cfea28cf4f94a79b667 24457 chromium_123.0.6312.86-1~deb12u1_ppc64el-buildd.buildinfo 0a98c7b4502d8d4e776bad5b14debb810f8a93adcc99b9bb20033dd7a7233eb8 73662908 chromium_123.0.6312.86-1~deb12u1_ppc64el.deb Files: 9952914184fa0e6d14fa9c0d76cb3f7c 1255888 debug optional chromium-common-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb d3ddbbb3b03615fc9ca40d54d34750af 5246028 web optional chromium-common_123.0.6312.86-1~deb12u1_ppc64el.deb 4dc6ef52a97c175e7a02c2b2bbc7e2c2 29377104 debug optional chromium-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb fed24e3ecc36dc6b49e91838f285a134 6524116 web optional chromium-driver_123.0.6312.86-1~deb12u1_ppc64el.deb 13eafed5a155680af7903a250a0ff990 14308 debug optional chromium-sandbox-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb f9fc6c4feeb26619fa4e364ae552232f 87960 web optional chromium-sandbox_123.0.6312.86-1~deb12u1_ppc64el.deb 655e2549e228f41af6624e74c41279db 24643692 debug optional chromium-shell-dbgsym_123.0.6312.86-1~deb12u1_ppc64el.deb 0ab850b2131c2ada9deb76d2c642a9f5 51659668 web optional chromium-shell_123.0.6312.86-1~deb12u1_ppc64el.deb d2a860b6c07e6d6cfe907cb0761d7354 24457 web optional chromium_123.0.6312.86-1~deb12u1_ppc64el-buildd.buildinfo 3da0f163df2ce33859a2f7f968b2887a 73662908 web optional chromium_123.0.6312.86-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmyxOicioak1AZZAyyPVDLEOGa2QFAmYGCqwACgkQyPVDLEOG a2SVjQ/8D2KkIIwqWu0Ni7IS53Obucj0GyDuYSFwvIhXF/w1ukchO9udxpln95uw gAc0Z9ShYmpHPEPtNlpPJ8/UfHDGMgMmb2OJKBnppZfyoDlQFnAJok1UxOqYSJpJ dZiq+tAnRNBV9zxjkTEbCyAsVCS3ncuhgMLF1kTc7Kbvtk5z1D7Ulwu2Xv9+DeYv oqrg8zNvFM3CmRNOaLyWRWGH/DIvB5sIN8Y4X0ITLUWjiWLjU25TtNLYv5WrLbQT 6R7Df3ujfsUcpxVcB+4MPX0HBiGIdNta92recUoi9Mh9S6sophO+QlTETrbFrRFP uBzjfrUmZ7aFmGzfwEezqFaHv59i52na3+augPJWxvEFjYKA2zf0eKP1iRxQdbQ6 67gDhVg8X6J4XzkR1HbMlbPEqmseObHH5lIh/vkjpARgMvz+aUDRD1Yy18YQDF4d /iDy95jXUw+PB4dOxLo8SoiXlNM1j5XrYAGVljwhAQ1pMXZMricsPOz8QTV/bB46 jIQfDY8UGv3rVim7gh1Udx+Ot+RTa/vb2BuNEeQ7sgKX/0HePFBuLWpad2z2AV/i QM4nexovFKhix3dsJv4nkqn5LcCdfd9L9t58G84OzQECuzRLNeAS+Ikevbeq+yvj 8OPYAfKKXe8BT6n1aJlQ6hJ0hETXhWEYeVTrTeRAFZshXQLMg0o= =qfYv -----END PGP SIGNATURE-----