chromium (130.0.6723.116-1) [PTS] [DDPO]

NEW: VCS has unreleased changes: 131.0.6778.85-1 > 130.0.6723.116-1

Git: https://salsa.debian.org/chromium-team/chromium.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 2121728
Browser: https://salsa.debian.org/chromium-team/chromium
Last scan: 2024-11-21 07:56:05+00
Next scan: 2024-11-28 02:20:00+00
Merge requests: 2

Debian changelog in Git:

chromium (131.0.6778.85-1) UNRELEASED; urgency=high

  * New upstream stable release.
    - CVE-2024-11110: Inappropriate implementation in Blink.
      Reported by Vsevolod Kokorin (Slonser) of Solidlab.
    - CVE-2024-11111: Inappropriate implementation in Autofill.
      Reported by Narendra Bhati, Suma Soft Pvt. Ltd - Pune (India).
    - CVE-2024-11112: Use after free in Media. Reported by
      Nan Wang(@eternalsakura13) and Zhenghang Xiao(@Kipreyyy) of
      360 Vulnerability Research Institute.
    - CVE-2024-11113: Use after free in Accessibility.
      Reported by Weipeng Jiang (@Krace) of VRI.
    - CVE-2024-11114: Inappropriate implementation in Views.
      Reported by Micky.
    - CVE-2024-11115: Insufficient policy enforcement in Navigation.
      Reported by mastersplinter.
    - CVE-2024-11116: Inappropriate implementation in Paint.
      Reported by Thomas Orlita.
    - CVE-2024-11117: Inappropriate implementation in FileSystem.
      Reported by Ameen Basha M K.
    - CVE-2024-11395: Type Confusion in V8. Reported by Anonymous.
  * d/patches:
    - upstream/wayland-gbm-pixmap.patch: drop, merged upstream.
    - disable/catapult.patch: refresh.
    - fixes/bindgen.patch: refresh.
    - fixes/freetype.patch: add new patch to fix missing
      enable_freetype arg declaration.
    - fixes/updater-test.patch: add simple build fix for deleted
      third_party/updater/.

  [ Timothy Pearson ]
  * d/patches/ppc64le:
    - workarounds/HACK-debian-clang-disable-pa-musttail.patch: Work around
      additional upstream musttail definitions
    - workarounds/HACK-debian-clang-disable-base-musttail.patch: Refresh for
      upstream changes
    - third_party/0002-third_party-libvpx-Remove-bad-ppc64-config.patch:
      Refresh for upstream changes

 -- Andres Salomon <dilinger@debian.org>  Wed, 06 Nov 2024 02:30:57 -0500

This branch is 3 commits ahead of tag debian/130.0.6723.116-1

Git log:

commit e0c003bc59e4c0243eced8a8f285086ebc30089e
Author: Timothy Pearson <tpearson@raptorengineering.com>
Date:   Thu Nov 21 07:25:58 2024 +0000

    Initial refresh of ppc64el patchset

commit d4d5fc280f4b1dd36e0635a09c8d0269e3b480aa
Author: Andres Salomon <dilinger@queued.net>
Date:   Thu Nov 21 02:11:18 2024 -0500

    fix changelog issues

commit b2aedf1800ea5074fd054d69ad5ee2fc67dae9dc
Author: Andres Salomon <dilinger@queued.net>
Date:   Wed Nov 20 15:30:01 2024 -0500

    initial update for v131