Accepted chromium 74.0.3729.108-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 24 Apr 2019 00:08:54 +0000
Source: chromium
Architecture: source
Version: 74.0.3729.108-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Michael Gilbert <mgilbert@debian.org>
Closes: 901831 924901 926032
Changes:
chromium (74.0.3729.108-1) unstable; urgency=medium
.
* New upstream stable release.
- Eliminates flood of vsync error messages (closes: #901831).
- Correctly shuts down when SIGTERM is recieved (closes: #924901).
- Fixes regression in hardware accelerated video (closes: #926032).
- CVE-2019-5805: Use after free in PDFium. Reported by Anonymous
- CVE-2019-5806: Integer overflow in Angle. Reported by Wen Xu
- CVE-2019-5807: Memory corruption in V8. Reported by TimGMichaud
- CVE-2019-5808: Use after free in Blink. Reported by cloudfuzzer
- CVE-2019-5809: Use after free in Blink. Reported by Mark Brand
- CVE-2019-5810: User information disclosure in Autofill. Reported by Mark
Amery
- CVE-2019-5811: CORS bypass in Blink. Reported by Jun Kokatsu
- CVE-2019-5813: Out of bounds read in V8. Reported by Aleksandar Nikolic
- CVE-2019-5814: CORS bypass in Blink. Reported by @AaylaSecura1138
- CVE-2019-5815: Heap buffer overflow in Blink. Reported by Nicolas
Grégoire
- CVE-2019-5818: Uninitialized value in media reader. Reported by Adrian
Tolbaru
- CVE-2019-5819: Incorrect escaping in developer tools. Reported by Svyat
Mitin
- CVE-2019-5820: Integer overflow in PDFium. Reported by pdknsk
- CVE-2019-5821: Integer overflow in PDFium. Reported by pdknsk
- CVE-2019-5822: CORS bypass in download manager. Reported by Jun Kokatsu
- CVE-2019-5823: Forced navigation from service worker. Reported by David
Erceg
Checksums-Sha1:
58e78512724198302187f8e967cb1beb14196544 4210 chromium_74.0.3729.108-1.dsc
13d66718d225c20703b13b0d4ad1d9f1fc61674c 246389280 chromium_74.0.3729.108.orig.tar.xz
210ed9527ba1a75449a8238d88efb066b0fad282 190396 chromium_74.0.3729.108-1.debian.tar.xz
1cd5fb94b50b107151e289af4e8041d00850a010 21186 chromium_74.0.3729.108-1_source.buildinfo
Checksums-Sha256:
6a75f3de899cf93325fbfd497a507c85310af3930dccfd72c3c7e715bd1cfc5c 4210 chromium_74.0.3729.108-1.dsc
3f44f1b01b4e03714651600bdaa09d5d825ea8184ab0d502c44f59fe0211ea64 246389280 chromium_74.0.3729.108.orig.tar.xz
13a503334a6ffb6e520bf953852e625ba2522a2daff6235fb946f1e6bd8e7ca1 190396 chromium_74.0.3729.108-1.debian.tar.xz
9ae376bcc49215a720235e5e07be67743d5d319161779abd39047d03a43aecac 21186 chromium_74.0.3729.108-1_source.buildinfo
Files:
67541b7d0be241b3b481d3f89e113b17 4210 web optional chromium_74.0.3729.108-1.dsc
551e30f800fd1a675fc858f184c0a942 246389280 web optional chromium_74.0.3729.108.orig.tar.xz
2366825dca7a9728da67ceae594045ac 190396 web optional chromium_74.0.3729.108-1.debian.tar.xz
2cf73181f7a877514b32b1fc7b51a7d7 21186 web optional chromium_74.0.3729.108-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=07s3
-----END PGP SIGNATURE-----