[Pkg-chromium-commit] [pkg-chromium] 01/01: release 59.0.3071.104-1

Michael Gilbert mgilbert at moszumanska.debian.org
Sun Jun 18 05:13:49 UTC 2017


This is an automated email from the git hooks/post-receive script.

mgilbert pushed a commit to branch master
in repository pkg-chromium.

commit 658f040a953268df6aa4387fd3b505e797f2f148
Author: Michael Gilbert <mgilbert at debian.org>
Date:   Sun Jun 18 05:15:53 2017 +0000

    release 59.0.3071.104-1
---
 debian/changelog | 10 ++++++++++
 debian/control   |  1 +
 debian/rules     | 19 ++++++++++++-------
 3 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 6d3ee97..7a84779 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+chromium-browser (59.0.3071.104-1) unstable; urgency=medium
+
+  * New upstream security release.
+    - CVE-2017-5087: Sandbox Escape in IndexedDB. Reported by Ned Williamson
+    - CVE-2017-5088: Out of bounds read in V8. Reported by Xiling Gong
+    - CVE-2017-5089: Domain spoofing in Omnibox. Reported by Michał Bentkowski
+  * Update get-orig-source to support really long arguments to tar --delete.
+
+ -- Michael Gilbert <mgilbert at debian.org>  Sat, 17 Jun 2017 20:03:49 +0000
+
 chromium-browser (59.0.3071.86-1) unstable; urgency=medium
 
   * New upstream stable release.
diff --git a/debian/control b/debian/control
index 206a375..0e7cc51 100644
--- a/debian/control
+++ b/debian/control
@@ -14,6 +14,7 @@ Build-Depends:
  ninja-build,
  python-jinja2,
  ca-certificates,
+ time,
  wget,
  flex,
  yasm,
diff --git a/debian/rules b/debian/rules
index 2fb61dd..f3b72c5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -140,13 +140,18 @@ override_dh_auto_clean:
 
 url=https://gsdview.appspot.com/chromium-browser-official
 version=$(shell dpkg-parsechangelog -S Version | sed s/-.*//)
-tarball=chromium-$(version).tar.xz
-removed=chromium-browser_$(version).files-removed
+extract=chromium-$(version)
+tarball=$(extract).tar.xz
+debian=chromium-browser_$(version)
+output=$(debian).orig.tar.xz
+removed=$(debian).files-removed
 
 get-orig-source:
 	wget -nv --show-progress -c $(url)/$(tarball) -O ../$(tarball)
-	mk-origtargz ../$(tarball) | tee ../$(removed)
-	echo >> ../$(removed)
-	tar tf ../$(tarball) | sort > ../chromium.upstream
-	tar tf ../chromium-browser_$(version).orig.tar.xz | sort > ../chromium.orig
-	diff -u ../chromium.upstream ../chromium.orig >> ../$(removed) || true
+	/usr/bin/time --portability ./debian/scripts/mk-origtargz ../$(tarball) > ../$(removed)
+	test ! -e $(extract) || rm -rf $(extract)
+	/usr/bin/time --portability tar xaf ../$(tarball)
+	while read line; do rm -rf $$line; done < ../$(removed)
+	test ! -e ../$(output) || rm -f ../$(output)
+	/usr/bin/time --portability tar caf ../$(output) $(extract)
+	/usr/bin/time --portability rm -rf $(extract)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-chromium/pkg-chromium.git



More information about the Pkg-chromium-commit mailing list