[Pkg-chromium-commit] [SCM] Git repository for pkg-chromium branch, master, updated. debian/16.0.912.77_r118311-1-13-gbaa63fe
Giuseppe Iuculano
iuculano at debian.org
Sun Feb 19 22:23:28 UTC 2012
The following commit has been merged in the master branch:
commit baa63fec600210599f36a3ef1d7e083070717831
Author: Giuseppe Iuculano <iuculano at debian.org>
Date: Sun Feb 19 23:22:54 2012 +0100
Updated changelog
diff --git a/debian/changelog b/debian/changelog
index e13b56c..d6cab94 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,86 @@
-chromium-browser (17.0.963.46~r119351-1) UNRELEASED; urgency=low
+chromium-browser (17.0.963.56~r121963-1) unstable; urgency=high
+ [ Michael Gilbert ]
+ * [5c3bb1e] remove duplicate dependency on libgconf2-dev
+ * [a978400] exclude .git directories from upstream tarball
+ * [d29d859] add descriptions to patches
+ * [52af88b] update debian/copyright field to adhere to latest DEP5 specification
+ * [f3b7ba9] update patches for chromium 17
+ * [4634823] install content_resources.pak
+ * [e7883c9] depend on libv8 >= 3.7
+ * [dd4fe7d] use pulseaudio
+
+ [ Giuseppe Iuculano ]
+ * [826649a] Fix FTBFS on armel and added armhf.
+ Thanks to Riku Voipio (Closes: #632119)
+ * [e9ac7ab] Link against system vpx (Closes: #642760)
+ * [b88a849] Remove ardcoded dependency on libvpx0 (Closes: #660159)
+ * [9dec8df] Updated patches
* New stable release:
+ - Medium CVE-2011-3016: Read-after-free with counter nodes.
+ Credit to miaubiz.
+ - High CVE-2011-3017: Possible use-after-free in database
+ handling. Credit to miaubiz.
+ - High CVE-2011-3018: Heap overflow in path rendering. Credit
+ to Aki Helin of OUSPG.
+ - High CVE-2011-3019: Heap buffer overflow in MKV handling. Credit to
+ Google Chrome Security Team (scarybeasts) and Mateusz Jurczyk / Gynvael
+ Coldwind of the Google Security Team.
+ - Medium CVE-2011-3020: Native client validator error. Credit to Nick
+ Bray of the Chromium development community.
+ - High CVE-2011-3021: Use-after-free in subframe loading.
+ Credit to Arthur Gerkis.
+ - Medium CVE-2011-3022: Inappropriate use of http for translation
+ script. Credit to Google Chrome Security Team (Jorge Obes).
+ - Medium CVE-2011-3023: Use-after-free with drag and drop.
+ Credit to pa_kt.
+ - Low CVE-2011-3024: Browser crash with empty x509 certificate. Credit
+ to chrometot.
+ - Medium CVE-2011-3025: Out-of-bounds read in h.264 parsing.
+ Credit to Sławomir Błażek.
+ - High CVE-2011-3026: Integer overflow / truncation in libpng.
+ Credit to Jüri Aedla.
+ - High CVE-2011-3027: Bad cast in column handling. Credit to
+ miaubiz
+ - Low CVE-2011-3953: Avoid clipboard monitoring after paste event.
+ Credit to Daniel Cheng of the Chromium development community.
+ - Low CVE-2011-3954: Crash with excessive database usage. Credit to
+ Collin Payne.
+ - High CVE-2011-3955: Crash aborting an IndexDB transaction. Credit to
+ David Grogan of the Chromium development community.
+ - Low CVE-2011-3956: Incorrect handling of sandboxed origins inside
+ extensions. Credit to Devdatta Akhawe, UC Berkeley.
+ - High CVE-2011-3958: Bad casts with column spans. Credit to
+ miaubiz.
+ - High CVE-2011-3959: Buffer overflow in locale handling.
+ Credit to Aki Helin of OUSPG.
+ - Medium CVE-2011-3960: Out-of-bounds read in audio decoding.
+ Credit to Aki Helin of OUSPG.
+ - Critical CVE-2011-3961: Race condition after crash of utility
+ process. Credit to Shawn Goertzen.
+ - Medium CVE-2011-3962: Out-of-bounds read in path clipping.
+ Credit to Aki Helin of OUSPG.
+ - Low CVE-2011-3964: URL bar confusion after drag + drop. Credit to
+ Code Audit Labs of VulnHunt.com.
+ - Low CVE-2011-3965: Crash in signature check. Credit to Sławomir
+ Błażek.
+ - High CVE-2011-3966: Use-after-free in stylesheet error
+ handling. Credit to Aki Helin of OUSPG.
+ - Low CVE-2011-3967: Crash with unusual certificate. Credit to Ben
+ Carrillo.
+ - High CVE-2011-3968: Use-after-free in CSS handling. Credit to
+ Arthur Gerkis.
+ - High CVE-2011-3969: Use-after-free in SVG layout. Credit to
+ Arthur Gerkis.
+ - Medium CVE-2011-3970: Out-of-bounds read in libxslt. Credit to
+ Aki Helin of OUSPG.
+ - High CVE-2011-3971: Use-after-free with mousemove events.
+ Credit to Arthur Gerkis.
+ - Medium CVE-2011-3972: Out-of-bounds read in shader translator. Credit
+ to Google Chrome Security Team (Inferno).
+
- -- Michael Gilbert <michael.s.gilbert at gmail.com> Fri, 10 Feb 2012 22:04:12 -0500
+ -- Giuseppe Iuculano <iuculano at debian.org> Sun, 19 Feb 2012 20:29:17 +0100
chromium-browser (16.0.912.77~r118311-1) unstable; urgency=high
--
Git repository for pkg-chromium
More information about the Pkg-chromium-commit
mailing list