[Pkg-chromium-commit] [pkg-chromium] 02/04: release 60.0.3112.78-1

Michael Gilbert mgilbert at moszumanska.debian.org
Wed Sep 27 01:55:21 UTC 2017


This is an automated email from the git hooks/post-receive script.

mgilbert pushed a commit to branch master
in repository pkg-chromium.

commit eac2158510e10e1b272d5603cd391f72b59be22e
Author: Michael Gilbert <mgilbert at debian.org>
Date:   Sat Jul 29 20:01:40 2017 +0000

    release 60.0.3112.78-1
---
 debian/changelog | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 75f4f22..cb84930 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,35 @@
+chromium-browser (60.0.3112.78-1) unstable; urgency=medium
+
+  * New upstream stable release:
+    - CVE-2017-5091: Use after free in IndexedDB. Reported by Ned Williamson
+    - CVE-2017-5092: Use after free in PPAPI. Reported by Yu Zhou, Yuan Deng
+    - CVE-2017-5093: UI spoofing in Blink. Reported by Luan Herrera
+    - CVE-2017-5094: Type confusion in extensions. Reported by Anonymous
+    - CVE-2017-5095: Out-of-bounds write in PDFium. Reported by Anonymous
+    - CVE-2017-5096: User information leak via Android intents. Reported by
+      Takeshi Terada
+    - CVE-2017-5097: Out-of-bounds read in Skia. Reported by Anonymous
+    - CVE-2017-5098: Use after free in V8. Reported by Jihoon Kim
+    - CVE-2017-5099: Out-of-bounds write in PPAPI. Reported by Yuan Deng, Yu
+      Zhou
+    - CVE-2017-5100: Use after free in Chrome Apps. Reported by Anonymous
+    - CVE-2017-5101: URL spoofing in OmniBox. Reported by Luan Herrera
+    - CVE-2017-5102: Uninitialized use in Skia. Reported by Anonymous
+    - CVE-2017-5103: Uninitialized use in Skia. Reported by Anonymous
+    - CVE-2017-5104: UI spoofing in browser. Reported by Khalil Zhani
+    - CVE-2017-7000: Pointer disclosure in SQLite. Reported by Chaitin Security
+      Research Lab
+    - CVE-2017-5105: URL spoofing in OmniBox. Reported by Rayyan Bijoora
+    - CVE-2017-5106: URL spoofing in OmniBox. Reported by Jack Zac
+    - CVE-2017-5107: User information leak via SVG. Reported by David
+      Kohlbrenner
+    - CVE-2017-5108: Type confusion in PDFium. Reported by Guang Gong
+    - CVE-2017-5109: UI spoofing in browser. Reported by José María Acuña
+      Morgado
+    - CVE-2017-5110: UI spoofing in payments dialog. Reported by xisigr
+
+ -- Michael Gilbert <mgilbert at debian.org>  Thu, 27 Jul 2017 03:22:03 +0000
+
 chromium-browser (60.0.3112.72-1) unstable; urgency=medium
 
   * New upstream beta release.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-chromium/pkg-chromium.git



More information about the Pkg-chromium-commit mailing list