Re: Chrome and Firefox Patch High-Severity Flaws
Lucas Castro <[email protected]> Mon, 16 Jun 2025 14:37:15 -0300
| Newsgroups | gmane.linux.debian.user.portuguese |
|---|---|
| Message-ID | <[email protected]> |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------S193bqFHnOWIexQ3MgLwRx5j Content-Type: multipart/mixed; boundary="------------mOCnwirX7NpmxsZE98g6r3K7"; protected-headers="v1" From: Lucas Castro <[email protected]> To: [email protected] Message-ID: <[email protected]> Subject: Re: Chrome and Firefox Patch High-Severity Flaws References: <CALRuth8zPfXVsCrdLJJ5fi94mx4ynLwcX=O9ZzRh_DTusjE5UQ@mail.gmail.com> <[email protected]> <[email protected]> In-Reply-To: <[email protected]> --------------mOCnwirX7NpmxsZE98g6r3K7 Content-Type: multipart/mixed; boundary="------------lenLHCLXsu411DFPpWewYell" --------------lenLHCLXsu411DFPpWewYell Content-Type: multipart/alternative; boundary="------------ssqs8ArnxYJ30e1H0kT4RuRz" --------------ssqs8ArnxYJ30e1H0kT4RuRz Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 DQpPbiAxNi8wNi8yMDI1IDE0OjMyLCBsdWlndWkgd3JvdGU6DQo+DQo+IENvcnJldG8gTHVj YXMNCj4NCj4gVGFtYmVtIGxlbWJyZWkgcXVlIGRpc3Ryb3MgcG9kZW0gc2VyIHJvbGxpbmcg ZSBzdGFibGUgbyBxdWUgZGV0ZXJtaW5hIA0KPiBkaWZlcmVuY2FzIGRlIHByYXpvcy4NCj4N Ck5vIGNhc28gZGUgYXR1YWxpemHDp8OjbyBkZSBzZWd1cmFuw6dhLCBow6EgcG9saXRpY2Eg cXVlIHRyYXRhIGVzc2UgdGlwbyBkZSANCmF0dWFsaXphw6fDo28gZSBEZWJpYW4gZXN0w6F2 ZWwgc2Vyw6EgYXR1YWxpemFkbyBub3JtYWxtZW50ZSwNCg0KY2FzbyBhIGF0dWFsaXphw6fD o28gdGVuaGEgc2lkbyBhcGxpY2FkbyBuYSB2ZXJzw6NvIGRhIHZlcnPDo28gZXN0w6F2ZWws IHF1ZSANCsOpIGFsZ28gY29tdW0gZW0gYXR1YWxpemHDp8OjbyBkZSBzZWd1cmFuw6dhLg0K DQoqKiBTZXJpYSBwYXJlY2lkbyBjb20gdW1hIGRpc3RybyByb2xsaW5nIHJlbGVhc2UgKioN Cg0KPiBBbGVtIGRpc3NvIG5vIGNhc28gZG8gQ2hyb21pdW0gZSBkbyBDaHJvbWUgcXVlIHNh byBtdWl0byBwYXJlY2lkb3MsIA0KPiBhbWJvcyBjb21wYXJ0aWxoYW0gYSBtZXNtYSBiYXNl IGRlIGNvZGlnbyBtYXMgbm8gQ2hyb21lIHBvciBzZXIgDQo+IHByb3ByaWV0YXJpbyBvIEdv b2dsZSBmYXogYXMgYXR1YWxpemFjb2VzIGF1dG9tYXRpY2FzIGVucXVhbnRvIG5vIA0KPiBD aHJvbWl1bSAoTGludXgncyBjYXNlKSBkZXBlbmRlIGRhIGRpc3Ryby4NCj4NCj4gR3JhdG8N Cj4NCj4gT24gMTYvMDYvMjAyNSAxNDoyMiwgTHVjYXMgQ2FzdHJvIHdyb3RlOg0KPj4NCj4+ DQo+PiBPbiAxNS8wNi8yMDI1IDEzOjAwLCBsdWl6IGdpbCB3cm90ZToNCj4+Pg0KPj4+IEJv YSB0YXJkZSBhIHRvZG9zIQ0KPj4+IFBvZGVtIG1lIGRpemVyIHNlIG8gdGVtcG8gZGUgYXR1 YWxpemFjYW/CoHBhcmEgbyBDaHJvbWl1bSBub3MgDQo+Pj4gcmVwb3NpdG9yaW9zwqBkbyBk ZWJpYW4va2FsaSBlc3RhIG5vIHByYXpvIGNvbnNpZGVyYWRvIG5vcm1hbD8NCj4+PiBBIGZh bGhhIGZvaSBkaXZ1bGdhZGEgMTAvMTEgZGUgSnVuaG8gbmEgTmV3c2J5dGVzIGRhIFNBTlMg ZSBhdGUgbyANCj4+PiBwcmVzZW50ZSBvIENocm9taXVtIHBlcm1hbmVjZSBzZW0gbyBwYXRj aC4NCj4+DQo+PiBVbWEgZm9ybWFyIMOpIHZlcmlmaWNhciBzZSBvIHVwc3RyZWFtIGrDoSBs YW7Dp291IHVtYSB2ZXJzw6NvIGNvbSANCj4+IGNvcnJlw6fDo28sIHNlIHNpbSwgbyBtYW50 ZW5lZG9yIMOpIGF2aXNhZG8gZGUgdW1hIG5vdmEgdmVyc8Ojbywgc2UgDQo+PiBlc3RpdmVy IGNvbmZpZ3VyYWRvIG8gbW9uaXRvcmFtZW50bywgcXVlIMOpIGFsZ28gYmVtIGNvbXVtLg0K Pj4NCj4+DQo+PiBTZSB0aXZlciBjb25oZWNpbWVudG8gZGUgcGF0Y2hlcyBqw6EgcHVibGlj YWRvIHZvY8OqIHBvZGUgZW52aWFyIG8gDQo+PiBwYXRjaCBwZWxvIHNpc3RlbWEgZGUgYnVn cy4NCj4+DQo+Pj4NCj4+PiAtLSANCj4+PiBBdGVuY2lvc2FtZW50ZSwNCj4+PiBMdWl6IENh cmxvcyBQcm9lbmNhIEdpbA0KPj4NCj4+IEF0ZW5jaW9zYW1lbnRlLA0KPj4NCj4+IEx1Y2Fz IENhc3Ryby4NCj4+DQo= --------------ssqs8ArnxYJ30e1H0kT4RuRz Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html> <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF= -8"> </head> <body> <p><br> </p> <div class=3D"moz-cite-prefix">On 16/06/2025 14:32, luigui wrote:<br>= </div> <blockquote type=3D"cite" cite=3D"mid:[email protected]"> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DU= TF-8"> <p><font face=3D"Courier 10 Pitch">Correto Lucas</font></p> <p><font face=3D"Courier 10 Pitch">Tambem lembrei que distros podem= ser rolling e stable o que determina diferencas de prazos.</fon= t></p> </blockquote> <p><font face=3D"Courier 10 Pitch">No caso de atualiza=C3=A7=C3=A3o d= e seguran=C3=A7a, h=C3=A1 politica que trata esse tipo de atualiza=C3= =A7=C3=A3o e Debian est=C3=A1vel ser=C3=A1 atualizado normalmente, <br> </font></p> <p><font face=3D"Courier 10 Pitch">caso a atualiza=C3=A7=C3=A3o tenha= sido aplicado na vers=C3=A3o da vers=C3=A3o est=C3=A1vel, que =C3=A9 a= lgo comum em atualiza=C3=A7=C3=A3o de seguran=C3=A7a.<br> </font></p> <p><font face=3D"Courier 10 Pitch">** Seria parecido com uma distro rolling release ** <br> </font></p> <blockquote type=3D"cite" cite=3D"mid:[email protected]"> <p><font face=3D"Courier 10 Pitch">Alem disso no caso do Chromium e= do Chrome que sao muito parecidos, ambos compartilham a mesma base de codigo mas no Chrome por ser proprietario o Google faz as atualizacoes automaticas enquanto no Chromium (Linux's case) depende da distro.</font></p> <p><font face=3D"Courier 10 Pitch">Grato<br> </font></p> <div class=3D"moz-cite-prefix">On 16/06/2025 14:22, Lucas Castro wrote:<br> </div> <blockquote type=3D"cite" cite=3D"mid:[email protected]= "> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8"> <p><br> </p> <div class=3D"moz-cite-prefix">On 15/06/2025 13:00, luiz gil wrote:<br> </div> <blockquote type=3D"cite" cite=3D"mid:[email protected]= ail.com"> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF-8"> <div dir=3D"ltr"> <div><br clear=3D"all"> </div> <div style=3D"font-family:monospace,monospace" class=3D"gmail_default">Boa tarde a todos!</div> <div style=3D"font-family:monospace,monospace" class=3D"gmail_default">Podem me dizer se o tempo de atualizacao=C2=A0para o Chromium nos repositorios=C2=A0do debian/kali esta no prazo considerado normal?</div> <div style=3D"font-family:monospace,monospace" class=3D"gmail_default">A falha foi divulgada 10/11 de Junh= o na Newsbytes da SANS e ate o presente o Chromium permanece sem o patch.</div> </div> </blockquote> <p>Uma formar =C3=A9 verificar se o upstream j=C3=A1 lan=C3=A7ou = uma vers=C3=A3o com corre=C3=A7=C3=A3o, se sim, o mantenedor =C3=A9 avisado de uma = nova vers=C3=A3o, se estiver configurado o monitoramento, que =C3=A9 algo bem com= um. <br> </p> <p><br> </p> <p>Se tiver conhecimento de patches j=C3=A1 publicado voc=C3=AA p= ode enviar o patch pelo sistema de bugs. <br> </p> <blockquote type=3D"cite" cite=3D"mid:[email protected]= ail.com"> <div dir=3D"ltr"><br> <span class=3D"gmail_signature_prefix">-- </span><br> <div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature"> <div dir=3D"ltr"> <div> <div dir=3D"ltr"> <div>Atenciosamente,<br> </div> Luiz Carlos Proenca Gil<br> </div> </div> </div> </div> </div> </blockquote> <p>Atenciosamente,</p> <p>Lucas Castro.<br> </p> </blockquote> </blockquote> </body> </html> --------------ssqs8ArnxYJ30e1H0kT4RuRz-- --------------lenLHCLXsu411DFPpWewYell Content-Type: application/pgp-keys; name="OpenPGP_0x42F79A5E0A4D5598.asc" Content-Disposition: attachment; filename="OpenPGP_0x42F79A5E0A4D5598.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBGNAiqQBEADQdLVGdbCksyLgeUTS1AzVzLIwojR5tkMiBAGekMf66ZmmO+B3 TVW0CO7cv0p1rUHb6GSNUK7HZUQTD+QpiR8T2RqweY1c+OvcohrsjKXLSYl831Xj x1SHQzBfK9bP04D/eNk5izZQcRRopvg5Z+iIC1xLcHk4eUMxiKfMw69LFXwcJGxS 501UzMCeh7V0J6Zy7kSzE3OIsqxou2BFuYqZJ5QUtRujO4JP9r1Nurzx7S+9uISF RJjGjKGgPUqfVRqktpRyZWEtG8jTExm9fYP8YSRwmV/x81Rk0pJCKjFfLsoNQ/pi ADjWKvQusJdlkB2m+WeYa9elUXAE30TuMKfJOUUCyoZrUopTv/ntj4QSFrZyrlAi nN2Ap0i1AwI3wqohU7GAK1Vm3S8T2nGcVQMSYZOu6yteM9Qh5yaf0pjy+O3sXhy5 V8TAWj9EBGRkiRC3Q2ETXNyjDkpKcqeDnN8srtkTVu1BglwZEnLVPbA+3/vgJWix FkKxmU2hueNBU0dxfOu1OQmB9D+D/IQ3wNAZhf88qIV7AoLJAxRgMlSd1srNcxS4 G9YP789NKawiomLoa1Ui0+T5YDl001xm6C1gr2tMXc52Fy/qG4+kZc9w+I6W+pOl toqMl7KGTLorp9a1Gx1YeHeHu8+BqR2mEjrWGVY5kCc5N7WN6hAJ24eKOwARAQAB zS9MdWNhcyBkZSBDYXN0cm8gQm9yZ2VzIDxsdWNhc0BnbnVhYm9yZG8uY29tLmJy PsLBlAQTAQoAPhYhBNycoFT355HOig/X80L3ml4KTVWYBQJjQIqkAhsDBQkDwmcA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEEL3ml4KTVWYI38P/iFwqS0gvust RJm4BzBITY5UpgZKbLNUAbZb3u+DIN2IrjbWJs8ZllPwUar8481SKOgxB68/vWuT RDw01UAfeYGOmt95mzSIPDVPo/YSqJM8pZvbIann6XtwD2e08iOSjr5w3Gi9uV7d 15dmfTEUIb7wD0AvFePYubyCBPs/Y+Km2nn5xBwyF1kY2nRY1dOsiOCF8A0OArEl kYT2TpB5B4OczvLOG+bdqjivBS/j2jfAx4WIq8xMDcI2aaSTCDFyowdFACuhwagt E8fY0HW1/TIN7zgw1VrhZtSAe4NHq+owaJ6IzKW8uCsYE5eccqjll0plLIAXtRjj 9iXIECHnBrUu71sLkd8WKvADFVgOLZS6EtrSAfZ+K6AWhIwVG5CA8lhzIIE3hEmm up3bZ4DjyzOt5P2r7lzwf98mldYXOirOSucUuF/+e+OjRQgwSqIYSTWmbLC+2SNv W4R8NLkSbYJS9fSZO53qz6GrIcFV28NnABYv4eD61D7dDMCoUPW8rZifMYELVWok tTIHZZTkbfpTeI1nIiShul6vwbrgzCRSqxBYCHCT6oBeNe3IZpcKr7aDLlFZQdNN ZNFsIPmd2HSTUFDgXlYFsnQN7zJr4SnLC9ygSqY70AZFHPg9cU9VY6WDJoI11TUy 5DNd91giQ092/+rxW6plZXPu/Jj27Sd2wsGUBBMBCgA+AhsDBQsJCAcCBhUKCQgL AgQWAgMBAh4BAheAFiEE3JygVPfnkc6KD9fzQveaXgpNVZgFAmcIXvEFCQeKO00A CgkQQveaXgpNVZh2lA/5AXkETiEeHRSJcRiqvtSg0m6QrVkIPVYzzof7+073pKK+ yS4l+nsHUx915rJZOM5ZABT0yWNMtTaKzxFeMMnJ8LgbFG1wG0wvoLdVolP6cEl4 /nT991cu7zsuRSCUKSs0RhM6qJkLMDloDT537FmqzkpDziC1JNSQfcBTpML/IdLO PMrP5sZogEC7WuL119NlWvpVCjUnJTzgLxnWyhYlx/j7HgMjWLzLN/NLmMzfZQAd 84YE6pKAyTOeTZd21YUYPi80L11DYGBAQaF0Crrk3bikHj/+kqYBxiAZskHnOWE4 8paGbEWO4HferLGnwi3+ZLn3wOPwN1NUah1cZRrSdqxNbixCXnA80uEo2tknAAFt O6s/0brNKCXQR9z8WSQ13LwLbMiYZTlKcsn+C4YcvTO21ekyz3daeN2usH6IkTo0 SpBGTpTiqIFwpmi4SCKNChLPqkuL3HcTn9+UsFPi8WidOkVhZGzUQVsJ1eqVKkoX EJAfPtVzsZlVHipRiActhcbquv9xD7nzqB+SDZdj7jdnlRKURDaJnxU3O9zGZkNt GCOohAod6Rbmd5Spjnp4lcoWiugkd0/by4gAg2qGW/Nh0cHDqM9YpZBDAQwiumEw lrIH1tneMRm8NHzu0jXJomxGwR5wx1yGskMLyxNviIiWuR0eqB4i+au7PcWUpgLO wU0EY0CKpAEQAO8MnK22GdtcKKYT1rzppBbef6gEMcIc0XbG0MI6XSrHn8ff76vn cKPAbT0kdti6YA+o9aV1Fz/IJF+vaqcITIcWsMJiyVh8Sk2sx6WR+tbGdVMxweUn WBKWk6Zh+UJnNG7vawsVIFNlbIRrBgFHr29zMzCjICDWz9/2YyPpn2dtdjixd1c1 VmTHsK9QeB8jLY60KTq1Bv5i4Q9l0iIVVSusvGgiRl88zTW4BJjQfJ9eMxK6Z6dH gtEGmePHL0Jn+mfR4UBxrlcyvV5CKfQ23c8X7lbg8yUv57vbqS6ZUPbnTQwANbgS SztsjbBcBRjDGzUc+hbs9FlEgZUmjIoUgD6QQpptmY1K1v2iXwcROzqC+eh1zE/0 nYEoff/21IT2tRuiI6/wrRUUpYOATUy+OMlqB12aWwRdqR6ocUlLEoivlRGiev4g WkvTzteMZcMwIb8APlJptMeClL1v0dtI9WBpxWAyn2Bpk8wpgK04O2KpSa5gDPhN xfqejwOO9W9O4WuIU2Jj7UM7QSS2d1ypCL7QZvth5wmDmOdo/O0LirT8ziZ4z8UX 7fkdc6V2ck+aE8qnA2gxRI7g3FD15/2V+FNi0zptXqFgnAb613IjXEW+MjkYMEmV mUArmwgZwNdDU4MysK+AuTer0CwAnFHBXz8LJs+YaZouLpMEP3hed4tfABEBAAHC wXwEGAEKACYWIQTcnKBU9+eRzooP1/NC95peCk1VmAUCY0CKpAIbDAUJA8JnAAAK CRBC95peCk1VmKneD/9K7O7lyQA4XWGypL2uxIko65++xWGsnUDcA02BLRREg/TB 46ENeWqSx5Q+yZnibHWAb/oIsr5R859IWC0gXCV+5AMOOm1Ukj0p8Nz8QwhRt5Rw 5K6A9LuYnpUBSUpf96SYcGGR3mIFVxYkg3W/gf4WyVrEKYjRkkTzf1mPhRmezjLC /sY2nOOXhVAYCJB3DNlglBhq56HSFRp9Jg2nPJw8BrICXKkIbSOQojyDGQBy/uuf C4m/guRhtgCra67KYRiC5iVzgge7DdB3alIuQuwyqWSyKsFIaCwSL3+hNe8XvT09 1MlUbNl+qLdFcfyJCr8racvw071l6qfM57MgAOPzL6D1mG8ryyU8J4Q9FkX5ByZ9 n/I9qwWlxbjvAzYyUOlrjY7O/HnTHYEtqF6A4sM2FOU5Vz13e8J35dueLMC7JYEd /z0I/X0R4q2WhvA5Nk95qo3A7JLzl9AxRwo7bEpcBb5JaQGdARs0sqaiUYt1PpqX AVeOWhGbxTv0puss/if1lD1q8fU8+WdWsOhXU0nT35kIwAamSWKgEPKMjPIP9/qV 11znXP1IFl1iDhutUL2bPF9GkUxJ+022NHucq2TlpY00TyJLpyAMnkdgDayh1b/5 6H4vINyW01m4RxC3O4bZLOQEgS3P7Nb4f2UFQjW3gMAMgz/1t2jd0ABf8dz/OcLB fAQYAQoAJgIbDBYhBNycoFT355HOig/X80L3ml4KTVWYBQJnCF2sBQkHijoIAAoJ EEL3ml4KTVWY4awQAIOffd5T2WsSgmkumjDMZ9bSyDBHvuzpaUphVqnrykx1Gvfl j7doF7pvmPayFlZapJK9boTU8ejY1nnACKUm/DmD4MigzbltoVDyn3N5l9ajztzk gD8Sn0wspqsCYKnLbSDjc+faFGO1ZVIfn5cbPi4He4+Ci0UIDgidBuA8zO0fr8ON lnb9MoMMyubmGe/ve6ft7LBEHIfjtDeRti8qBvgbTvosEaU/47fKHL/XXFvhyP5o H/DH1NjDIbvKKhcT6OEv1o18KbjWwuxASBgAfHva3tfu2/08XQEBLlchzw33amJd aak8f945Cn4FN1YafEWICKnniRNsp4P9526Q6/7Xe9sTpXcDPLlPq0eAjy8OxWId uxRNuVR7lLZO9FmeN6T0LsUZuLR2XDtbVE08caX9+7rAfCE8Um+2f8uEhKx0a/E1 0vy1LOFMi3OoJJwcCkcz8K0shlvx6xpk0iYAZNGMAWn0/i40DebIH2D5VujRwTxw d+VyCEOBs2sxBiunPmiDy0B07Tf6B+n49h0WIIQpykhqkvEeTEWyP94MghL6hya5 5sjnyJQecmuKiE/bQ6+iMdTuxEnxnurvydMVy6l2qObzh++Zn/QfyWRgmFxhUq77 CmMjA6+a7yCp/MWpI+E4NEVzLEiO7MV4wEbm5NWmc4u4v7JHZfOcq3SLEkGG =3Dec+l -----END PGP PUBLIC KEY BLOCK----- --------------lenLHCLXsu411DFPpWewYell-- --------------mOCnwirX7NpmxsZE98g6r3K7-- --------------S193bqFHnOWIexQ3MgLwRx5j Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE3JygVPfnkc6KD9fzQveaXgpNVZgFAmhQVkwFAwAAAAAACgkQQveaXgpNVZh2 ag/8DXGRL2IHTB5GBgbkpUZEcoKn/WDhTEtc1L6v5PdkqLUGs41S4wgPyuJouu0Uh3Je0P7TdXe6 mGtru1N/kAbfhrdbWqc5HRfPMej+hx0Bqudh7FgZ8iiHyxQLYlz868iA87nlT7SMMhj9dJ9Kq+/W weE+L5Lm6gDGl1a4XBT5BykcPDWCYai7sBCKBCkL7KpzPtGS+hr36KRagd3yHXXH4x03Y9hwINOT seq6NzFeCimjsSuukTZ1al/f2SgYdXZLRd9bMlhSvwe2fXc5coiGYQWg60h+RXKNcJNfgpm6KQ5P XHO+AyLDAAvo+axjESYuIDyZXCUii50B7b0ttS/ahvtxrgwWdZ6HJ48bRs2RytlfEdZ9OtLl5Qjn bywwCDQ883MKeazG7SQFOVbQU/GXVM5tOE+3P4Qj2uE9ulAx5J8qGocFT+E0ZTLPD7acpZ9EJdxL A4iCaqbrb6+eLjeIFrIUflE2VxFkdtDqqTWSu1xnz6zz3Ed0hJKlw74zZetIJzVW9WXIFYKWsIo6 BkQS4OaP/k3MYX5IjPFRP1QjOgk9NFoYG1jzo4vnvJB0lEUAq3qZ2c5EDD/djxOk10ij5wuV5lsq pRX6mkkKSrRVriIPjzyppG85RDCB7WNxK18zRiNpfJQZ03h4a30ege9CFOIVY5VLyqKsFbWtJQUE ouc= =gc+L -----END PGP SIGNATURE----- --------------S193bqFHnOWIexQ3MgLwRx5j--