Accepted chromium-browser 49.0.2623.75-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 02 Mar 2016 23:47:54 +0000
Source: chromium-browser
Binary: chromium chromium-l10n chromedriver
Architecture: source
Version: 49.0.2623.75-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org>
Changed-By: Michael Gilbert <mgilbert@debian.org>
Description:
chromedriver - web browser - WebDriver support
chromium - web browser
chromium-l10n - web browser - language packs
Changes:
chromium-browser (49.0.2623.75-1) unstable; urgency=medium
.
* New upstream stable release:
- CVE-2016-1630: Same-origin bypass in Blink. Credit to Mariusz Mlynski.
- CVE-2016-1631: Same-origin bypass in Pepper Plugin. Credit to Mariusz
Mlynski.
- CVE-2016-1632: Bad cast in Extensions. Credit to anonymous.
- CVE-2016-1633: Use-after-free in Blink. Credit to cloudfuzzer.
- CVE-2016-1634: Use-after-free in Blink. Credit to cloudfuzzer.
- CVE-2016-1635: Use-after-free in Blink. Credit to Rob Wu.
- CVE-2016-1636: SRI Validation Bypass. Credit to ryan@cyph.com.
- CVE-2015-8126: Out-of-bounds access in libpng. Credit to joerg.bornemann.
- CVE-2016-1637: Information Leak in Skia. Credit to Keve Nagy.
- CVE-2016-1638: WebAPI Bypass. Credit to Rob Wu.
- CVE-2016-1639: Use-after-free in WebRTC. Credit to Khalil Zhani.
- CVE-2016-1640: Origin confusion in Extensions UI. Credit to Luan Herrera.
- CVE-2016-1641: Use-after-free in Favicon. Credit to Atte Kettunen.
- CVE-2016-1642: Various fixes from internal audits, fuzzing and other
initiatives.
- Multiple vulnerabilities in libv8 (version 4.9.385.26).
* Set use_sysroot=0 to continue using system libraries.
Checksums-Sha1:
60fefd2237862758e1c62a53a947224a0ec950d3 3887 chromium-browser_49.0.2623.75-1.dsc
ae8c320bcf511afcc691bd8a8ed1946848ce56f7 452527444 chromium-browser_49.0.2623.75.orig.tar.xz
464f30f047bff9d371483983197718a8715da34a 119120 chromium-browser_49.0.2623.75-1.debian.tar.xz
Checksums-Sha256:
183483cb09eaeac19a9e67d37d6e138319418c62d0fd303368c96cd3022620d4 3887 chromium-browser_49.0.2623.75-1.dsc
687e11ab1353c082c176ee7fb60389f69a61c5856de812fe3ceb29ff93c49c56 452527444 chromium-browser_49.0.2623.75.orig.tar.xz
215233049f5054c3a76ab8f5879f950a9f02e6d9af654e114f76b6e9a10cbe08 119120 chromium-browser_49.0.2623.75-1.debian.tar.xz
Files:
a2ba5a9f6258ebea5f1a925db17f8512 3887 web optional chromium-browser_49.0.2623.75-1.dsc
858e0a03e836cab5c062343584318f5b 452527444 web optional chromium-browser_49.0.2623.75.orig.tar.xz
261cfd558e19c0b554144ce5ff2d6d05 119120 web optional chromium-browser_49.0.2623.75-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=
=Sz2n
-----END PGP SIGNATURE-----