-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 18 Jun 2024 15:55:14 -0400 Source: chromium Architecture: source Version: 126.0.6478.114-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (126.0.6478.114-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2024-6100: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) participating in SSD Secure Disclosure's TyphoonPWN 2024. - CVE-2024-6101: Inappropriate implementation in WebAssembly. Reported by @ginggilBesel. - CVE-2024-6102: Out of bounds memory access in Dawn. Reported by wgslfuzz. - CVE-2024-6103: Use after free in Dawn. Reported by wgslfuzz. Checksums-Sha1: ba1db8c0d23ac2d1e880639f30038a6ca5c12a08 3782 chromium_126.0.6478.114-1~deb12u1.dsc bec8685108dfbecdd69e9292579919e225de86b3 963643200 chromium_126.0.6478.114.orig.tar.xz acb78062c21620629f513f6c5cf29e4fa8fc8e41 432612 chromium_126.0.6478.114-1~deb12u1.debian.tar.xz c8c8d6da9b571af989019680fbbfd75c928206ca 21917 chromium_126.0.6478.114-1~deb12u1_source.buildinfo Checksums-Sha256: c61d1d7aee7585647cf5469a00058c34084903d73368788a5885d1a382bd6f3f 3782 chromium_126.0.6478.114-1~deb12u1.dsc ea423605a0087d7e868ab295ef7279eea6b47d10591e3e96af421946efe05071 963643200 chromium_126.0.6478.114.orig.tar.xz 25a605d713e0cf9285c4b66aa8d97f36dede58faf851e2b531490e9e3675af45 432612 chromium_126.0.6478.114-1~deb12u1.debian.tar.xz 53c3572138acf408dc6d499f61aa088ace13c2798eb5802d928d058244ff25a8 21917 chromium_126.0.6478.114-1~deb12u1_source.buildinfo Files: f3ff4d56ad905df4b349b426ec684163 3782 web optional chromium_126.0.6478.114-1~deb12u1.dsc a8814835c827e7782c7eccc304401412 963643200 web optional chromium_126.0.6478.114.orig.tar.xz ca2f905ea5562434d29b23f7c2a798fc 432612 web optional chromium_126.0.6478.114-1~deb12u1.debian.tar.xz 449bc424ece6c9ab8ef6719dd4fbd631 21917 web optional chromium_126.0.6478.114-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmZyf7EUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjdv7BAAnHR8Za2U3MJpRx+LS4n+9YswNQ4L tTkLUGCL8784oM1UdoF90Xh1QkGyvhHnHRmDDSYCgcOOD6UJEK91qbglJXDsrkv6 SXqt9zWAPI32ANrgBo2RfQrPoxQvatutBNfuZgsoYeBQw5VpVLmIiFvvNX60jhps HJNOB5rFXDHN6zu/dkl0KDnF+g29ABhJgLT5t3KYwWKe9FnIIwIPCPHMvJ/r6+RT QqPE3ZcraJZ7OupHih4uVAQvAHUdOks0ZMRppRu4514SGgCVyEe3mTlftG/cmgt7 9oX12Ldk0FIL/0PUOhcjv/1ScajGdFcgNttvsGWDI8c0PGkaV2ysKDURHPJH2aEz Krplp/Y3Ri+J2C9l3vzChf15l5XsBxQRmYn/yvufYcHxWmw2wJ/Pw5tMMedQ+016 ag2DTdOTM7rxTqUZjmpwBq79c1J5CTZ28m07KXQaqlMv3qqhv2q/Alb70Vz1RkWx zH6PGaJgcbgXJbMuRr40uXZulvyyA+6Ir90mSesHB6nVhncYKlsPcC7rJJT8C9I9 uX9Ybh1sJijAbOC5+GnA99yM1Cp02g949X1bVoV9lAXXbsIit2esflFZVSq8KatY Y0H4e+K7bfprcVnZvXSHquUTwy4///y+rVdgDTwqB26/ji98kvucSrlsi0ToHi13 uR7foIE8WniUeTo= =4HVO -----END PGP SIGNATURE-----