[Pkg-chromium-commit] [pkg-chromium] 01/01: release 46.0.2490.71-1~deb8u1

Michael Gilbert mgilbert at moszumanska.debian.org
Tue Dec 8 02:06:23 UTC 2015


This is an automated email from the git hooks/post-receive script.

mgilbert pushed a commit to branch jessie
in repository pkg-chromium.

commit cc86051739ec878af6783521c5c7872834caf9ea
Author: Michael Gilbert <mgilbert at debian.org>
Date:   Tue Dec 8 02:00:17 2015 +0000

    release 46.0.2490.71-1~deb8u1
---
 debian/changelog | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 3a14f2f..83c4ad3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,26 @@
+chromium-browser (46.0.2490.71-1~deb8u1) jessie-security; urgency=medium
+
+  * New upstream stable release:
+    - CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski.
+    - CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski.
+    - CVE-2015-6755: Cross-origin bypass in Blink. Credit to Mariusz Mlynski.
+    - CVE-2015-6756: Use-after-free in PDFium. Credit to anonymous.
+    - CVE-2015-6757: Use-after-free in ServiceWorker. Credit to Collin Payne.
+    - CVE-2015-6758: Bad-cast in PDFium. Credit to Atte Kettunen of OUSPG.
+    - CVE-2015-6759: Information leakage in LocalStorage. Credit to Muneaki
+      Nishimura.
+    - CVE-2015-6760: Improper error handling in libANGLE. Credit to Ronald
+      Crane, an independent security researcher.
+    - CVE-2015-6761: Memory corruption in FFMpeg. Credit to Aki Helin and
+      Khalil Zhani.
+    - CVE-2015-6762: CORS bypass via CSS fonts. Credit to Muneaki Nishimura.
+    - CVE-2015-6763: Various fixes from internal audits, fuzzing and other
+      initiatives.
+    - Multiple vulnerabilities in V8 fixed at the tip of the 4.6 branch
+      (currently 4.6.85.23).
+
+ -- Michael Gilbert <mgilbert at debian.org>  Sat, 17 Oct 2015 08:30:32 +0000
+
 chromium-browser (45.0.2454.85-1~deb8u1) jessie-security; urgency=high
 
   * New upstream stable release:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-chromium/pkg-chromium.git



More information about the Pkg-chromium-commit mailing list