-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Dec 2022 19:10:00 -0600 Source: chromium Binary: chromium-l10n Architecture: all Version: 108.0.5359.124-1~deb11u1 Distribution: bullseye-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Timothy Pearson Description: chromium-l10n - web browser - language packs Changes: chromium (108.0.5359.124-1~deb11u1) bullseye-security; urgency=high . * New upstream security release. - CVE-2022-4436: Use after free in Blink Media. Reported by Anonymous on 2022-11-15 - CVE-2022-4437: Use after free in Mojo IPC. Reported by koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research Institute on 2022-11-30 - CVE-2022-4438: Use after free in Blink Frames. Reported by Anonymous on 2022-11-07 - CVE-2022-4439: Use after free in Aura. Reported by Anonymous on 2022-11-22 - CVE-2022-4440: Use after free in Profiles. Reported by Anonymous on 2022-11-09 . [ Andres Salomon ] * Drop fixes/disable-cxx20.patch; turned out to be a clang-14 bug (https://bugs.debian.org/1025394) causing the issue that is now fixed. Checksums-Sha1: b9f6f78703ec253afb9e70a056d804c51fbcb513 5593352 chromium-l10n_108.0.5359.124-1~deb11u1_all.deb 97a55cb1f7535be9e8c287bf139c598ab672d42a 21322 chromium_108.0.5359.124-1~deb11u1_all-buildd.buildinfo Checksums-Sha256: 3c59fe71f71657a27f0927f3595114fa423d16379add29067ec74b4611fdbd50 5593352 chromium-l10n_108.0.5359.124-1~deb11u1_all.deb c7e4b305368e9698544200a33760564e773388cd965ca6ae9d89534c9c4806d5 21322 chromium_108.0.5359.124-1~deb11u1_all-buildd.buildinfo Files: d60b747126e8538f04df63c9c9bfe8f5 5593352 localization optional chromium-l10n_108.0.5359.124-1~deb11u1_all.deb 13d0f306e729eff8d282132e0507a713 21322 web optional chromium_108.0.5359.124-1~deb11u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHhnKQNkF1LuwA8CntGhFlQFFlWsFAmOaFXwACgkQtGhFlQFF lWvf4BAAu5P0MMtnYcLgOxfyqqMPWKuV1H4f2j3V0M9oxOXpz4Pt1QwBU6dW6t/V BJf+ssAUS0CNEwAPS1N1IEQXTn44EkhWdFGADQbdpZVG23uXyiBqutuHSaPuw5R/ tyi5MLpYA6IDrqe42ytCNSieTIhW5Kpo1qZBJR58Dqqh9sKqps9fWazpjlY3agZp QdmE3sfpfaWD9F6WpeOiC+8tLP17olRMIaYumfBpNJY5hT0Rm2IeMoRY7NtRNNyI AW3apwF78un15FHv6SgwsOvcT/VEA6Z7tDBdOyA8dk0TLq3eNxH20vO0bXmCT//n CEaGTcctdtiXlCO+WIKzJ5/EIYmJbsDNz8uzz/HnqNKf75IPsSBnoWmWTJRkbc1z Ghpd3Kwb0E2dBfGnHrKtOpoHtokdWbq3WzhDs9Kl05Hs6rJ+j8JHRgXK4j4ivPl+ 97HZigIqIxJ5mH73Xjr4qBtGHcvSCs6Mw6lfHwcqU4R6oQDplAe+nbyQ2sZB9Tid R3WUPcYaDIjgeUq7HrvJUTo8on3Eykx8Lfl0nu1C2Da4GLtCxY/+pN7BN40bfAvk bUOrGTYj9oHYOzGSprhS0ipkB9+aHUNEsvKZNx2uPN42dqYU8y+TIJJgPSUYirIp dqqoKCMrtTQTEW6gxm2VxwzI/R8FsO1lNJ+ilLw5qPNsOfsUFHI= =66xv -----END PGP SIGNATURE-----