-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Dec 2024 15:33:53 -0500
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 131.0.6778.139-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (131.0.6778.139-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2024-12381: Type Confusion in V8.
       Reported by Seunghyun Lee (@0x10n).
     - CVE-2024-12382: Use after free in Translate. Reported by
       lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group.
   * (Temporarily?) switch from llvm's libc++ to gcc's libstdc++ to
     simplify the prior clang-16/19 upgrades.
   * d/patches:
     - fixes/bindgen.patch: refresh.
     - upstream/dawn-strlen.patch: add gcc-specific build fix.
     - upstream/ink-isfinite.patch: add gcc-specific build fix.
     - upstream/webrtc-optional.patch: add gcc-specific build fix.
     - upstream/variant.patch: add gcc-specific build fixes.
     - upstream/array.patch: add gcc-specific build fix.
     - fixes/absl-optional.patch: re-introduce clang/gcc build workaround.
     - upstream/mrc-copy-op.patch: add gcc-specific build fix.
     - fixes/font-gc-asan.patch: add a better workaround for bad font-gc
       behavior under libstdc++. This is self-contained and small, unlike
       the prior reverts of the switch to font garbage collection.
     - bookworm/constexpr.patch: re-enable (and refresh) build fix
       specifically for gcc 12.
     - bookworm/constexpr2.patch: re-enable build fix for gcc 12.
     - bookworm/bubble-contents.patch: re-enable build fix for gcc 12.
 .
   [ Nathan Teodosio ]
   * Simplify fixes/bindgen.patch so it doesn't need frequent rebasing.
 .
   [ Daniel Richard G. ]
   * d/copyright: Expand list of Files-Excluded: entries.
   * d/rules: Various updates to get-orig-source rule, including use of
     grep-dctrl(1) and the LASTCHANGE.committime timestamp.
   * d/scripts/check-upstream: Avoid issues with inaccurate $(pwd) value and
     spaces in filenames, and print all errors instead of only the first one.
Checksums-Sha1:
 ef21bd55215dbb1eb6912bacd08d8120fa8d23a0 7845552 chromium-l10n_131.0.6778.139-1~deb12u1_all.deb
 680f04fc8cec4dd5072b2630ac337a1d490ac163 21995 chromium_131.0.6778.139-1~deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 045ceca6578b642d13b225ffe7544b1b62dbe568ec7766fe9860b54a48b0fdac 7845552 chromium-l10n_131.0.6778.139-1~deb12u1_all.deb
 b125d327a25455a01bf18d172b7ac25175956299c03813af24632049cde208d0 21995 chromium_131.0.6778.139-1~deb12u1_all-buildd.buildinfo
Files:
 3fa7df389b802489f35cb92694ec363c 7845552 localization optional chromium-l10n_131.0.6778.139-1~deb12u1_all.deb
 671dbe10165f89fce4b9d0789e3e0f24 21995 web optional chromium_131.0.6778.139-1~deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=GX8l
-----END PGP SIGNATURE-----