Changelog
chromium-browser (24.0.1312.68-1) unstable; urgency=high
* New stable release:
- High CVE-2013-0839: Use-after-free in canvas font handling.
Credit to Atte Kettunen of OUSPG.
- Medium CVE-2013-0840: Missing URL validation when opening new
windows.
- High CVE-2013-0841: Unchecked array index in content blocking. Credit
to Google Chrome Security Team (Chris Evans).
- Medium CVE-2013-0842: Problems with NULL characters embedded in
paths. Credit to Google Chrome Security Team (Jüri Aedla).
- High CVE-2012-5145: Use-after-free in SVG layout. Credit to
Atte Kettunen of OUSPG.
- High CVE-2012-5146: Same origin policy bypass with malformed
URL. Credit to Erling A Ellingsen and Subodh Iyengar, both of Facebook.
- High CVE-2012-5147: Use-after-free in DOM handling. Credit to
José A. Vázquez.
- Medium CVE-2012-5148: Missing filename sanitization in hyphenation
support. Credit to Google Chrome Security Team (Justin Schuh).
- High CVE-2012-5149: Integer overflow in audio IPC handling. Credit to
Google Chrome Security Team (Chris Evans).
- High CVE-2012-5150: Use-after-free when seeking video. Credit to
Google Chrome Security Team (Inferno).
- High CVE-2012-5151: Integer overflow in PDF JavaScript. Credit to
Mateusz Jurczyk, with contribution from Gynvael Coldwind, both of Google
Security Team.
- Medium CVE-2012-5152: Out-of-bounds read when seeking video. Credit
to Google Chrome Security Team (Inferno).
- High CVE-2012-5153: Out-of-bounds stack access in v8. Credit to
Andreas Rossberg of the Chromium development community.
- High CVE-2013-0829: Corruption of database metadata leading to
incorrect file access. Credit to Google Chrome Security Team (Jüri Aedla).
- Low CVE-2013-0831: Possible path traversal from extension process.
Credit to Google Chrome Security Team (Tom Sepez).
- [160380] Medium CVE-2013-0832: Use-after-free with printing. Credit to Google
Chrome Security Team (Cris Neckar).
- Medium CVE-2013-0833: Out-of-bounds read with printing. Credit to
Google Chrome Security Team (Cris Neckar).
- Medium CVE-2013-0834: Out-of-bounds read with glyph handling. Credit
to Google Chrome Security Team (Cris Neckar).
- Low CVE-2013-0835: Browser crash with geolocation. Credit to Arthur
Gerkis.
- High CVE-2013-0836: Crash in v8 garbage collection. Credit to Google
Chrome Security Team (Cris Neckar).
- Medium CVE-2013-0837: Crash in extension tab handling. Credit to Tom
Nielsen.
- Low CVE-2013-0838: Tighten permissions on shared memory
segments. Credit to Google Chrome Security Team (Chris Palmer).
- High CVE-2012-5139: Use-after-free with visibility events.
Credit to Chamal de Silva.
- High CVE-2012-5140: Use-after-free in URL loader. Credit to
Chamal de Silva.
- Medium CVE-2012-5141: Limit Chromoting client plug-in instantiation.
Credit to Google Chrome Security Team (Jüri Aedla).
- Critical CVE-2012-5142: Crash in history navigation. Credit to Michal
Zalewski of Google Security Team.
- Medium CVE-2012-5143: Integer overflow in PPAPI image buffers. Credit
to Google Chrome Security Team (Cris Neckar).
- High CVE-2012-5144: Stack corruption in AAC decoding. Credit
to pawlkt.
- High CVE-2012-5138: Incorrect file path handling. Credit to Google
Chrome Security Team (Jüri Aedla).
- High CVE-2012-5137: Use-after-free in media source handling.
Credit to Pinkie Pie.
- High CVE-2012-5133: Use-after-free in SVG filters. Credit to
miaubiz.
- Medium CVE-2012-5130: Out-of-bounds read in Skia. Credit to
Atte Kettunen of OUSPG.
- Low CVE-2012-5132: Browser crash with chunked encoding. Credit to
Attila Szász.
- High CVE-2012-5134: Buffer underflow in libxml. Credit to Google
Chrome Security Team (Jüri Aedla).
- Medium CVE-2012-5135: Use-after-free with printing. Credit to Fermin
Serna of Google Security Team.
- Medium CVE-2012-5136: Bad cast in input element handling. Credit to
Google Chrome Security Team (Inferno).
- Medium CVE-2012-5127: Integer overflow leading to
out-of-bounds read in WebP handling. Credit to Phil Turnbull.
- [Linux 64-bit only] Medium CVE-2012-5120: Out-of-bounds array
access in v8. Credit to Atte Kettunen of OUSPG.
- High CVE-2012-5116: Use-after-free in SVG filter handling.
Credit to miaubiz.
- High CVE-2012-5121: Use-after-free in video layout. Credit to
Atte Kettunen of OUSPG.
- Low CVE-2012-5117: Inappropriate load of SVG subresource in img
context. Credit to Felix Gröbert of the Google Security Team.
- Medium CVE-2012-5119: Race condition in Pepper buffer handling.
Credit to Fermin Serna of the Google Security Team.
- Medium CVE-2012-5122: Bad cast in input handling. Credit to Google
Chrome Security Team (Inferno).
- Medium CVE-2012-5123: Out-of-bounds reads in Skia. Credit to
Google Chrome Security Team (Inferno).
- High CVE-2012-5124: Memory corruption in texture handling. Credit to
Al Patrick of the Chromium development community.
- Medium CVE-2012-5125: Use-after-free in extension tab handling.
Credit to Alexander Potapenko of the Chromium development community.
- Medium CVE-2012-5126: Use-after-free in plug-in placeholder handling.
Credit to Google Chrome Security Team (Inferno).
- High CVE-2012-5128: Bad write in v8. Credit to Google Chrome Security
Team (Cris Neckar).
* [574d76c] Override the lintian flag:
embedded-library usr/lib/chromium/libffmpegsumo.so: libavcodec
* [3105012] Updated changelog
* [ac9c032] Use explicit library dependencies instead of dlopen
* [1ad217c] Fixed CHANNELS_URL
* [7c2d359] Drop SCM revision from the version
* [ca31c0c] Install all chromium libs
* [167aea7] Use internal copy of libpng. This is necessary because with
system libpng render process is consuming 100% CPU
(see http://code.google.com/p/chromium/issues/detail?id=174603)
* [8742d82] debian/patches/pulse_ftbfs.patch: Fix FTBFS
* [9e76ec7] Refreshed patches
* [1c6f4c3] Use Debian api key
* [cdf5c74] Refreshed patches
* [ad9480c] Remove useless embedded copy of documentation from source
containing non DFSG-compliant material:
- src/native_client/toolchain/linux_x86/info
- src/native_client/toolchain/linux_x86/man
- src/native_client/toolchain/linux_x86/share/info
- src/native_client/toolchain/linux_x86/x86_64-nacl/share/info
- src/native_client/toolchain/linux_x86_newlib/info
- src/native_client/toolchain/linux_x86_newlib/man
- src/native_client/toolchain/linux_x86_newlib/share/info
(Closes: #695703)
* [31ea388] Fixed Homepage field.
Thanks to Dmitry Shachnev (Closes: #686561)
* [d509e07] Override the lintian flag: embedded-library usr/lib/chromium/chromium: libpng
-- Giuseppe Iuculano <email address hidden> Wed, 06 Feb 2013 15:34:17 +0100
