Package: chromium
Version: 93.0.4577.82-1
Severity: normal
X-Debbugs-Cc: sedat.di...@gmail.com

Dear Maintainer,

I updated my google-chrome-stable package to version 94.0.4606.61-1 on my 
Debian/unstable AMD64 system.

Debian's security-tracker for chromium [1] package shows several CVE security 
issues not fixed.

Open issues:

Bug             stretch         buster          bullseye        bookworm        
sid             Description
CVE-2021-37973  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37972  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37971  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37970  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37969  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37968  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37967  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37966  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37965  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37964  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37963  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37962  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37961  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37960  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37959  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37958  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37957  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable      
CVE-2021-37956  vulnerable      vulnerable      vulnerable      vulnerable      
vulnerable

For more details also see "Stable Channel Update for Desktop" at [2].

Please upgrade chromium from v93.x to v94.x.

Thanks.

Regards,
- Sedat -

[1] https://security-tracker.debian.org/tracker/source-package/chromium
[2] https://chromereleases.googleblog.com/search/label/Stable%20updates
[3] 
https://www.heise.de/news/Google-schliesst-19-Sicherheitsluecken-in-Chrome-6199412.html
 (German)

-- System Information:
Debian Release: bookworm/sid
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'testing'), (500, 'stable'), (99, 
'buildd-unstable'), (99, 'buildd-experimental'), (99, 'experimental'), (99, 
'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.14.0-1-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages chromium depends on:
ii  chromium-common     93.0.4577.82-1
ii  libasound2          1.2.5.1-1
ii  libatk-bridge2.0-0  2.38.0-2
ii  libatk1.0-0         2.36.0-2
ii  libatomic1          11.2.0-8
ii  libatspi2.0-0       2.42.0-1
ii  libavcodec58        7:4.4-6+b2
ii  libavformat58       7:4.4-6+b2
ii  libavutil56         7:4.4-6+b2
ii  libc6               2.32-4
ii  libcairo2           1.16.0-5
ii  libcups2            2.3.3op2-7
ii  libdbus-1-3         1.12.20-2
ii  libdrm2             2.4.107-8
ii  libevent-2.1-7      2.1.12-stable-1
ii  libexpat1           2.4.1-2+b1
ii  libflac8            1.3.3-2
ii  libfontconfig1      2.13.1-4.2
ii  libfreetype6        2.10.4+dfsg-1
ii  libgbm1             21.2.2-1
ii  libgcc-s1           11.2.0-8
ii  libglib2.0-0        2.70.0-1+b1
ii  libharfbuzz0b       2.7.4-1
ii  libicu67            67.1-7
ii  libjpeg62-turbo     1:2.0.6-4
ii  libjsoncpp24        1.9.4-4
ii  liblcms2-2          2.12~rc1-2
ii  libminizip1         1.1-8+b1
ii  libnspr4            2:4.32-1
ii  libnss3             2:3.70-1
ii  libopenjp2-7        2.4.0-3
ii  libopus0            1.3.1-0.1
ii  libpango-1.0-0      1.48.10+ds1-1
ii  libpng16-16         1.6.37-3
ii  libpulse0           15.0+dfsg1-2
ii  libre2-9            20210901+dfsg-1
ii  libsnappy1v5        1.1.8-1
ii  libstdc++6          11.2.0-8
ii  libwebp6            0.6.1-2.1
ii  libwebpdemux2       0.6.1-2.1
ii  libwebpmux3         0.6.1-2.1
ii  libx11-6            2:1.7.2-2+b1
ii  libxcb1             1.14-3
ii  libxcomposite1      1:0.4.5-1
ii  libxdamage1         1:1.1.5-2
ii  libxext6            2:1.3.4-1
ii  libxfixes3          1:5.0.3-2
ii  libxml2             2.9.12+dfsg-5
ii  libxrandr2          2:1.5.1-1
ii  libxshmfence1       1.3-1
ii  libxslt1.1          1.1.34-4
ii  zlib1g              1:1.2.11.dfsg-2

Versions of packages chromium recommends:
ii  chromium-sandbox  93.0.4577.82-1

Versions of packages chromium suggests:
pn  chromium-driver  <none>
ii  chromium-l10n    93.0.4577.82-1
pn  chromium-shell   <none>

Versions of packages chromium-common depends on:
ii  libc6       2.32-4
ii  libstdc++6  11.2.0-8
ii  libx11-6    2:1.7.2-2+b1
ii  libxext6    2:1.3.4-1
ii  x11-utils   7.7+5
ii  xdg-utils   1.1.3-4.1
ii  zlib1g      1:1.2.11.dfsg-2

Versions of packages chromium-common recommends:
ii  chromium-sandbox                        93.0.4577.82-1
ii  fonts-liberation                        1:1.07.4-11
ii  gnome-shell [notification-daemon]       40.5-1
ii  libgl1-mesa-dri                         21.2.2-1
ii  libu2f-udev                             1.1.10-3
ii  notification-daemon                     3.20.0-4+b1
ii  plasma-workspace [notification-daemon]  4:5.22.90-1~np2
ii  system-config-printer                   1.5.14-1
ii  upower                                  0.99.13-1

Versions of packages chromium-sandbox depends on:
ii  libc6  2.32-4

-- Configuration Files:
/etc/chromium.d/default-flags changed [not included]

-- no debconf information

Reply via email to