-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Aug 2023 19:26:52 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 115.0.5790.170-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (115.0.5790.170-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2023-4068: Type Confusion in V8. Reported by Jerry. - CVE-2023-4069: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab. - CVE-2023-4070: Type Confusion in V8. Reported by Jerry. - CVE-2023-4071: Heap buffer overflow in Visuals. Reported by Guang and Weipeng Jiang of VRI. - CVE-2023-4072: Out of bounds read and write in WebGL. Reported by Apple Security Engineering and Architecture (SEAR). - CVE-2023-4073: Out of bounds memory access in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori. - CVE-2023-4074: Use after free in Blink Task Scheduling. Reported by Anonymous. - CVE-2023-4075: Use after free in Cast. Reported by Cassidy Kim(@cassidy6564). - CVE-2023-4076: Use after free in WebRTC. Reported by Natalie Silvanovich of Google Project Zero. - CVE-2023-4077: Insufficient data validation in Extensions. Reported by Anonymous. - CVE-2023-4078: Inappropriate implementation in Extensions. Reported by Anonymous. * debian/patches/disable/driver-chrome-path.patch: refresh for minor changes. Checksums-Sha1: 72c3cfd15d2787368012bfb8298c139480e37fec 1197588 chromium-common-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb d3e6614ed1a3355884df16bfc3edc68875569ba0 4930640 chromium-common_115.0.5790.170-1~deb12u1_amd64.deb e0829bc14db51c87752ed86afc661176fefdec3e 30086412 chromium-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 4afba5dff869f5dd7423b92370cc527cdd1beee2 5038732 chromium-driver_115.0.5790.170-1~deb12u1_amd64.deb a01f1a6f412cdec97b1182b1aa2172868edae211 12644 chromium-sandbox-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 344b34b68ecd8346b874a1b7d973aa0f4e07f048 79872 chromium-sandbox_115.0.5790.170-1~deb12u1_amd64.deb b2e3363f83022151ee1ea15768d54d154cc4483b 26079216 chromium-shell-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 883ae21b6461e883919b46337d62825ee87c086d 48229288 chromium-shell_115.0.5790.170-1~deb12u1_amd64.deb 8f8ed802e6d28279854a8f489caf7c0b7110aaed 24019 chromium_115.0.5790.170-1~deb12u1_amd64-buildd.buildinfo 9be65b371f8ee3a0d9e7e75a817f14e2e0e94494 68916532 chromium_115.0.5790.170-1~deb12u1_amd64.deb Checksums-Sha256: 41ab0abf292c52116b80a6b2501f2bc5249f77e854a26db21b5277108bb33a55 1197588 chromium-common-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb f9007212ffae61c354a8b5e91e37f8eb003c8060098dffe6251d8c2100802964 4930640 chromium-common_115.0.5790.170-1~deb12u1_amd64.deb 691d60eddffb253b970ca342a68e1678381f4c504c492305092e294f9c60ba0c 30086412 chromium-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb f2c44cef8ccb8dcb48d04127bfab17cf045a4856acea5229ae7bda5b97ebab60 5038732 chromium-driver_115.0.5790.170-1~deb12u1_amd64.deb b1e6789f619473dd030dd8ffd3f035587548ce3fc533123c9e51a5a064a0740c 12644 chromium-sandbox-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 7e6234d16b1ec74e58acba8d39a84929e3ba81f454c85a03d50df6f7f4b65934 79872 chromium-sandbox_115.0.5790.170-1~deb12u1_amd64.deb f566eb72cda49c7cb25a606698b3b0ac9b52ad6b97d3c59864c7a0a446cbc841 26079216 chromium-shell-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 68621431e598796e50744bd192cefc430611adca82af2d66b928f22f79c52ad6 48229288 chromium-shell_115.0.5790.170-1~deb12u1_amd64.deb c16990c70cdd8f1f1f08b3a3884ecee56a4a9cf46e08351beeddc251003da4ac 24019 chromium_115.0.5790.170-1~deb12u1_amd64-buildd.buildinfo c0507b51e2e23a2e9231ac54ed70879c8a90c9be5ac74a58ed5bf0ea810399d5 68916532 chromium_115.0.5790.170-1~deb12u1_amd64.deb Files: edc06e5431c48ca18712b15c2fca02ee 1197588 debug optional chromium-common-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 1ea8d21745ccd4cd3a40754465e6147d 4930640 web optional chromium-common_115.0.5790.170-1~deb12u1_amd64.deb 7f9e74cfcf2c89115f10b676b5eb9feb 30086412 debug optional chromium-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 469fb71f0743115df53bd57ad448fec9 5038732 web optional chromium-driver_115.0.5790.170-1~deb12u1_amd64.deb 6393ba517878c99b3a8ba5bb73a52733 12644 debug optional chromium-sandbox-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 92cfe47f3120d6381b95e47de1846adb 79872 web optional chromium-sandbox_115.0.5790.170-1~deb12u1_amd64.deb 0cb78fbfa66c44a0d4b5952db42d8194 26079216 debug optional chromium-shell-dbgsym_115.0.5790.170-1~deb12u1_amd64.deb 4e4b503050aa6edbf6cc27913647dd8f 48229288 web optional chromium-shell_115.0.5790.170-1~deb12u1_amd64.deb 89fe72a52987bb03a525d963a777601f 24019 web optional chromium_115.0.5790.170-1~deb12u1_amd64-buildd.buildinfo fd40372a704083ca1bafc1057f56cdfd 68916532 web optional chromium_115.0.5790.170-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE85oDfSLnwLkvY4Ibj5YjFeDZ0JMFAmTMCJEACgkQj5YjFeDZ 0JOjww/9EUa8cQ/xARRc7h5I0PVgVqDf384sufkTFGlfBYizMuD4yfXeQx+wp+8j O0H7Mkb6NSDcgRj6kxU7PEFdf1NB8uPc6el6XcMFtYx4xnRql7FAVsBCEQqmi1CP RpfuRZz5elYChAFyFa826fwzpgg90Ph2jo94z62qEBwryR0GG8wqJYYUPPOYQlM/ W0PzWpJlLjw1yXq7RmXNve7PXnF52WdHcuIMJfvk5tamst6FV2yQCH7mAOTy+4aI /3o3Ad0+X6q51++Jimun/eOvhAzTiCMxhyL8pAW2jdEq1S66DMNoIDjHYYuPm2Hw ssp9jyRmcFIVVK1yBh8hmDMiQbCALC97p2qO/FA9ZYojVbSVcF870tpHoelIDjrp wixd8DKNlNPwUFaQF2vZtfVYvhg46bpS+WE6ykvFr81leuVym2cGLwkl6uExIvX6 yw+UCWmczxkE5KZwj+VsqViXqVN2ZUB14EXXDVeNoRaS9Hj3VOwQEgHeOxxtETQV 1D0PwDzTh/YuMR7R4jBl/1RY5rGkGtkndXmM8fqZ2ezRztKdgzx6EreEgVP2juqb cjjssTRSc6b/X6n8FsrR1A5KctJaXQT8iR/2BCskc8kacla4wi40NgnTd7GUii4G BBc93OliZIz/a7ehns9nkkdGqlAABLHSEb9BxbVdlkoKD5yiHBQ= =A9gi -----END PGP SIGNATURE-----