[ubuntu/maverick] chromium-browser 6.0.472.59~r59126-0ubuntu1 (Accepted)
Fabien Tassin
fta at ubuntu.com
Thu Sep 16 16:41:03 BST 2010
chromium-browser (6.0.472.59~r59126-0ubuntu1) maverick; urgency=low
* New upstream release from the Stable Channel (LP: #638736)
This release fixes the following security issues:
- [50250] High, Use-after-free when using document APIs during parse.
Credit to David Weston of Microsoft + Microsoft Vulnerability Research
(MSVR) and wushi of team 509 (independent discoveries).
- [50712] High, Use-after-free in SVG styles. Credit to kuzzcc.
- [51252] High, Use-after-free with nested SVG elements. Credit to kuzzcc.
- [51709] Low, Possible browser assert in cursor handling. Credit to
“magnusmorton”.
- [51919] High, Race condition in console handling. Credit to kuzzcc.
- [53176] Low, Unlikely browser crash in pop-up blocking. Credit to kuzzcc.
- [53394] High, Memory corruption in Geolocation. Credit to kuzzcc.
- [53930] High, Memory corruption in Khmer handling. Credit to Google
Chrome Security Team (Chris Evans).
- [54006] Low, Failure to prompt for extension history access. Credit to
“adriennefelt”.
* Don't build with PIE on armel for now, it fails to link.
- update debian/rules
Date: Wed, 15 Sep 2010 07:20:49 +0200
Changed-By: Fabien Tassin <fta at ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/chromium-browser/6.0.472.59~r59126-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 15 Sep 2010 07:20:49 +0200
Source: chromium-browser
Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector
Architecture: source
Version: 6.0.472.59~r59126-0ubuntu1
Distribution: maverick
Urgency: low
Maintainer: Fabien Tassin <fta at ubuntu.com>
Changed-By: Fabien Tassin <fta at ubuntu.com>
Description:
chromium-browser - Chromium browser
chromium-browser-dbg - chromium-browser debug symbols
chromium-browser-inspector - page inspector for the chromium-browser
chromium-browser-l10n - chromium-browser language packages
Launchpad-Bugs-Fixed: 638736
Changes:
chromium-browser (6.0.472.59~r59126-0ubuntu1) maverick; urgency=low
.
* New upstream release from the Stable Channel (LP: #638736)
This release fixes the following security issues:
- [50250] High, Use-after-free when using document APIs during parse.
Credit to David Weston of Microsoft + Microsoft Vulnerability Research
(MSVR) and wushi of team 509 (independent discoveries).
- [50712] High, Use-after-free in SVG styles. Credit to kuzzcc.
- [51252] High, Use-after-free with nested SVG elements. Credit to kuzzcc.
- [51709] Low, Possible browser assert in cursor handling. Credit to
“magnusmorton”.
- [51919] High, Race condition in console handling. Credit to kuzzcc.
- [53176] Low, Unlikely browser crash in pop-up blocking. Credit to kuzzcc.
- [53394] High, Memory corruption in Geolocation. Credit to kuzzcc.
- [53930] High, Memory corruption in Khmer handling. Credit to Google
Chrome Security Team (Chris Evans).
- [54006] Low, Failure to prompt for extension history access. Credit to
“adriennefelt”.
* Don't build with PIE on armel for now, it fails to link.
- update debian/rules
Checksums-Sha1:
cb74ad21133f2d23a6f714f6b212422f8000a6cf 1940 chromium-browser_6.0.472.59~r59126-0ubuntu1.dsc
a9f1076365c95dc5f1107ed3496c0c9832b985c5 153241579 chromium-browser_6.0.472.59~r59126.orig.tar.gz
57741dc53b7cbb94e5d9d4970a8d94e5657e50d4 186156 chromium-browser_6.0.472.59~r59126-0ubuntu1.diff.gz
Checksums-Sha256:
40936a0a73bdc8d76cb03204626e768703d8a6436053d6a01e8011f9df6a6e37 1940 chromium-browser_6.0.472.59~r59126-0ubuntu1.dsc
576aa3aa28827dcaa7bccbbede2ca6e214d157d528db846382a6c903ff148b26 153241579 chromium-browser_6.0.472.59~r59126.orig.tar.gz
6225817d813fd24edb010eaf6a469fd12528082cf643d3c002ea0d4fd37d243e 186156 chromium-browser_6.0.472.59~r59126-0ubuntu1.diff.gz
Files:
59b433323ea17d33625e1c14a72aaeaa 1940 web optional chromium-browser_6.0.472.59~r59126-0ubuntu1.dsc
15b6c88451e5c7d0c02f32db8621ddac 153241579 web optional chromium-browser_6.0.472.59~r59126.orig.tar.gz
a96300dcb635fe36516d2ce953a53269 186156 web optional chromium-browser_6.0.472.59~r59126-0ubuntu1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkySOUwACgkQaOfNHbbuIOgobgCeOXW8vRm9lFckc22lrui2zgfp
cxwAn0VDCogyvLVk8lLd9uZGLlzsW/jr
=BMOM
-----END PGP SIGNATURE-----
More information about the Maverick-changes
mailing list