-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 23 Aug 2023 08:58:00 -0500 Source: chromium Binary: chromium-l10n Architecture: all Version: 116.0.5845.110-1~deb11u1 Distribution: bullseye-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Timothy Pearson Description: chromium-l10n - web browser - language packs Changes: chromium (116.0.5845.110-1~deb11u1) bullseye-security; urgency=high . [ Timothy Pearson ] * New upstream security release. - CVE-2023-4430: Use after free in Vulkan. Reported by Cassidy Kim(@cassidy6564). - CVE-2023-4429: Use after free in Loader. Reported by Anonymous. - CVE-2023-4428: Out of bounds memory access in CSS. Reported by Francisco Alonso (@revskills). - CVE-2023-4427: Out of bounds memory access in V8. Reported by Sergei Glazunov of Google Project Zero. - CVE-2023-4431: Out of bounds memory access in Fonts. Reported by Microsoft Security Researcher. . [ Andres Salomon ] * d/patches/upstream hvec.patch: add arm* v4l2 build fix. * d/rules: FTBFS if we're uploading to -security distribution w/out CVEs. Checksums-Sha1: a9a4b2b056de05b036004c316caff9c8eddc6734 6455604 chromium-l10n_116.0.5845.110-1~deb11u1_all.deb da94289b351c0d1fc68e9d7e2a45a8b9f77fc425 23044 chromium_116.0.5845.110-1~deb11u1_all-buildd.buildinfo Checksums-Sha256: 647c9b7ed64a8a13b202a48590f5aa2810737422b517ca91636de088439a9bf1 6455604 chromium-l10n_116.0.5845.110-1~deb11u1_all.deb 1ca4d5f401da80216d0f98e5ded0a85bedb67f7a1fa7a5ec4262f1672be263ef 23044 chromium_116.0.5845.110-1~deb11u1_all-buildd.buildinfo Files: 9e973eff7afb1184e6d3a5a0fc0007fe 6455604 localization optional chromium-l10n_116.0.5845.110-1~deb11u1_all.deb 7898f6b5a3a2620f5b7f708766b176eb 23044 web optional chromium_116.0.5845.110-1~deb11u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtzb3SVunlrB0F8t8ExOkVqF4GXMFAmToZ3UACgkQExOkVqF4 GXOQAg//dDaye5LnYPCKDbFR1JvzLQm9V1UIkowZF+WHJhkWMv/xUVIZpf34AJx8 0bnZ5zN80Dp4N4vmYFhygu/1XoxWmV+/J3v5YZut/IOju6hCbqXrJQoY2uHTgbIe ooCrWH9EnbnSF96bQaa/wsRVSQEM176fuTMrhvXjSqwmzSfvb11VzW1ob3RFmGHn Kh0vssQMrK1I1GW4kalgKVDLt6Pqk3opPrJ8P4kklFA2cf9RujKE/zNwLCH/aXXr THUH+NIUofkgtTx1Yf65VPD1/38Wz1cuHkQ/i33hYanQx+z2Rabm3gi+0KOYDomz IYGdTOEFsfvnedtMdpo+k7tMD639ornFjw/ubEYo7LlCdlDfKIted8xb9eiigbWg kzxHh1kjKW4/8RJ46O5WyfDzgqfrU2SYKcH9uG91PM4wjTAHwJqlA8LfpX1D3g+s rc8zu5GXvBhoBguLaZlxEo15NArkBUd3+XFRyEQ9u2SoA1NZSIR3BzviRO6krPDB VuF8yYMfO3NQK8pDkMKIxoUAY7yPCbGGnZeG+Ygd4uhfgE1+wj6/40/+SmUiT+xh Gt1ncyb/DNC57mY2eH36+b0/rxNm69uxYQJzAaMwu3S/eB7rJ0T53gaflYHQOJei xKzoSdAOFovsO9MFv6/S4UV966CfnEw+hI/bC40tkailsIt67Cs= =BrDn -----END PGP SIGNATURE-----