[Pkg-chromium-commit] [pkg-chromium] 01/01: release 35.0.1916.153-1~deb7u1

[Michael Gilbert]

This is an automated email from the git hooks/post-receive script.

mgilbert pushed a commit to branch wheezy
in repository pkg-chromium.

commit dc23881cfb7b9f424e2fd519d760c9e47681d354
Author: Michael Gilbert <mgilbert at debian.org>
Date:   Sun Sep 21 22:55:38 2014 +0000

    release 35.0.1916.153-1~deb7u1
---
 debian/changelog             | 12 ++++++++++++
 debian/patches/no-sse2.patch | 26 ++++++++++++++++++++++++++
 debian/patches/series        |  1 +
 3 files changed, 39 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 1e38230..c814fba 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,15 @@
+chromium-browser (35.0.1916.153-1~deb7u1) stable-security; urgency=high
+
+  * New upstream stable release:
+    - CVE-2014-3154: Use-after-free in filesystem api. Credit to Collin Payne.
+    - CVE-2014-3155: Out-of-bounds read in SPDY. Credit to James March, Daniel
+      Sommermann and Alan Frindell of Facebook.
+    - CVE-2014-3156: Buffer overflow in clipboard. Credit to Atte Kettunen.
+    - CVE-2014-3157: Heap overflow in media.
+  * Don't set sse2 compiler flags on i386 (closes: #750361).
+
+ -- Michael Gilbert <mgilbert at debian.org>  Fri, 13 Jun 2014 04:15:39 +0000
+
 chromium-browser (35.0.1916.114-1~deb7u2) stable-security; urgency=high
 
   * Add flags to avoid memory allocation issues while linking on i386.
diff --git a/debian/patches/no-sse2.patch b/debian/patches/no-sse2.patch
new file mode 100644
index 0000000..45d831e
--- /dev/null
+++ b/debian/patches/no-sse2.patch
@@ -0,0 +1,26 @@
+description: don't set sse2 compiler flags on i386
+author: Michael Gilbert <mgilbert at debian.org>
+debian-bug: http://bugs.debian.org/750361
+
+--- a/src/build/common.gypi
++++ b/src/build/common.gypi
+@@ -3391,7 +3391,7 @@
+                 # http://crbug.com/313032 for an example where this has "bit"
+                 # us in the past.
+                 'cflags': [
+-                  '-msse2',
++                  '-msse',
+                   '-mfpmath=sse',
+                   '-mmmx',  # Allows mmintrin.h for MMX intrinsics.
+                   '-m32',
+--- a/src/third_party/qcms/qcms.gyp
++++ b/src/third_party/qcms/qcms.gyp
+@@ -31,7 +31,7 @@
+       'msvs_disabled_warnings': [ 4018 ],
+ 
+       'conditions': [
+-        ['target_arch=="ia32" or target_arch=="x64"', {
++        ['target_arch=="x64"', {
+           'defines': [
+             'SSE2_ENABLE',
+           ],
diff --git a/debian/patches/series b/debian/patches/series
index 7cce0dd..1ae536e 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -20,6 +20,7 @@ gcc4.7.patch
 icon.patch
 
 linker-flags.patch
+no-sse2.patch
 
 make-support/gyp.patch
 make-support/mojo.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-chromium/pkg-chromium.git