-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 23 Feb 2013 11:45:07 +0100 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector chromium chromium-dbg chromium-l10n chromium-inspector Architecture: source all amd64 Version: 25.0.1364.97-1 Distribution: unstable Urgency: low Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Giuseppe Iuculano <iuculano@debian.org> Description: chromium - Google's open source chromium web browser chromium-browser - Chromium browser - transitional dummy package chromium-browser-dbg - chromium-browser debug symbols transitional dummy package chromium-browser-inspector - page inspector for the chromium-browser - transitional dummy pack chromium-browser-l10n - chromium-browser language packages - transitional dummy package chromium-dbg - Debugging symbols for the chromium web browser chromium-inspector - page inspector for the chromium browser chromium-l10n - chromium-browser language packages Changes: chromium-browser (25.0.1364.97-1) unstable; urgency=low . * New stable release: - High CVE-2013-0879: Memory corruption with web audio node. Credit to Atte Kettunen of OUSPG. - High CVE-2013-0880: Use-after-free in database handling. Credit to Chamal de Silva. - Medium CVE-2013-0881: Bad read in Matroska handling. Credit to Atte Kettunen of OUSPG. - High CVE-2013-0882: Bad memory access with excessive SVG parameters. Credit to Renata Hodovan. - Medium CVE-2013-0883: Bad read in Skia. Credit to Atte Kettunen of OUSPG. - Low CVE-2013-0884: Inappropriate load of NaCl. Credit to Google Chrome Security Team (Chris Evans). - Medium CVE-2013-0885: Too many API permissions granted to web store. - Low CVE-2013-0887: Developer tools process has too many permissions and places too much trust in the connected server. - Medium CVE-2013-0888: Out-of-bounds read in Skia. Credit to Google Chrome Security Team (Inferno). - Low CVE-2013-0889: Tighten user gesture check for dangerous file downloads. - High CVE-2013-0890: Memory safety issues across the IPC layer. Credit to Google Chrome Security Team (Chris Evans). - High CVE-2013-0891: Integer overflow in blob handling. Credit to Google Chrome Security Team (Jüri Aedla). - Medium CVE-2013-0892: Lower severity issues across the IPC layer. Credit to Google Chrome Security Team (Chris Evans). - Medium CVE-2013-0893: Race condition in media handling. Credit to Andrew Scherkus of the Chromium development community. - High CVE-2013-0894: Buffer overflow in vorbis decoding. Credit to Google Chrome Security Team (Inferno). - High CVE-2013-0895: Incorrect path handling in file copying. Credit to Google Chrome Security Team (Jüri Aedla). - High CVE-2013-0896: Memory management issues in plug-in message handling. Credit to Google Chrome Security Team (Cris Neckar). - High CVE-2013-0898: Use-after-free in URL handling. Credit to Alexander Potapenko of the Chromium development community. - Low CVE-2013-0899: Integer overflow in Opus handling. Credit to Google Chrome Security Team (Jüri Aedla). - Medium CVE-2013-0900: Race condition in ICU. Credit to Google Chrome Security Team (Inferno). * [a5f15ae] Added libpci-dev to B-depends * [ace2b7a] Refreshed patches * [32c84fa] Install remoting_locales * [f868804] Do not enable NEON on ARM, thanks Ubuntu. * [d1a3e36] Ignore stamp files in missing checks Checksums-Sha1: 6d83072ee4098793df8d7df87564cc897f837dc0 3002 chromium-browser_25.0.1364.97-1.dsc 7e1249e05645442a0e641ca5bc1399ce9a3a752c 641250172 chromium-browser_25.0.1364.97.orig.tar.xz f5d298f1f525d820033529ba997855e7e73df80d 255836 chromium-browser_25.0.1364.97-1.debian.tar.gz 8764df0d522617a220c58abe17309ed434975197 159512 chromium-browser_25.0.1364.97-1_all.deb e08a1f261aa37210ff1e7b6824226e8aae714100 158844 chromium-browser-dbg_25.0.1364.97-1_all.deb f12e8779a9a3017703b19112a5384ba25f275403 158974 chromium-browser-l10n_25.0.1364.97-1_all.deb ecbe1081ecc607efad0e8899a477ff44bb0e2e8d 158874 chromium-browser-inspector_25.0.1364.97-1_all.deb 46aa36abc9a2fe3a5f8247de26150f1e3622a273 2614950 chromium-l10n_25.0.1364.97-1_all.deb 8e3882b1d3d169c9649dbb908ac6294cce7af3c8 806980 chromium-inspector_25.0.1364.97-1_all.deb 298287388c8ab7aaca6f66aad0fbdbff226beff0 39127230 chromium_25.0.1364.97-1_amd64.deb f448f001c2d50439fdc7b4d4c43b96f026acf4a5 412509354 chromium-dbg_25.0.1364.97-1_amd64.deb Checksums-Sha256: de8bea6750d1ca582f3037af6117fd1d56c165559b4ae78e0886bf2300f6aab5 3002 chromium-browser_25.0.1364.97-1.dsc e7618796f84fb99c8faa206f8371867311712c77a7682cd47a7cb94fabcac2d3 641250172 chromium-browser_25.0.1364.97.orig.tar.xz 0c9eced2933ec364dfa434a0db9d53c4454aa687612611dbbebf06190f59a062 255836 chromium-browser_25.0.1364.97-1.debian.tar.gz 59cd2ed6068d67547cc8d277f0de0c0858f54287968912a6d031e27d00fd2f34 159512 chromium-browser_25.0.1364.97-1_all.deb 800152cedcfca0bc316378b17e3493764eb3e80787a7112e284cbbb5a535a958 158844 chromium-browser-dbg_25.0.1364.97-1_all.deb bd6436151513c3ec402b23abbb974f385b4d121dda4c983a5b5e39376ff9a819 158974 chromium-browser-l10n_25.0.1364.97-1_all.deb 531121ac1f5f8ded26c1a72d4f35adca1829b5335dfe2b53629d424e4bad3c3e 158874 chromium-browser-inspector_25.0.1364.97-1_all.deb f49655cc0be6776737a1fa52ba5f129cda559e55f625a8aa74d1f1ce1c26490c 2614950 chromium-l10n_25.0.1364.97-1_all.deb d92b3171ab42a9d80170522d1c64332b569e660e488a131fe24439eab1ed04a7 806980 chromium-inspector_25.0.1364.97-1_all.deb 2fb3e223c99bbc1649a81e777bd316054b5589776abdd6d0dc8db217642050de 39127230 chromium_25.0.1364.97-1_amd64.deb 4c59b87c494fe377020ece738610c207d24a42eb8799518510ec2e7f43d5d13d 412509354 chromium-dbg_25.0.1364.97-1_amd64.deb Files: 8815f09c9ef947b32d453078394a520e 3002 web optional chromium-browser_25.0.1364.97-1.dsc c43ecd779286ca0f2ec24bd7c4118aa2 641250172 web optional chromium-browser_25.0.1364.97.orig.tar.xz c9147bc7d5dc0ae969706b72651ea5d0 255836 web optional chromium-browser_25.0.1364.97-1.debian.tar.gz aab0a24a872f75cdcef30fb46dea54b3 159512 oldlibs optional chromium-browser_25.0.1364.97-1_all.deb 8cb6f81f92c902724524b10ab74c4fb3 158844 oldlibs extra chromium-browser-dbg_25.0.1364.97-1_all.deb 6d578884c0cba1c72bbd8cd31088124a 158974 oldlibs optional chromium-browser-l10n_25.0.1364.97-1_all.deb 66b3fdc3a68af2ecd7df2ff170ce61d7 158874 oldlibs optional chromium-browser-inspector_25.0.1364.97-1_all.deb 58404d9d2af58d6f3f249c384e837cfd 2614950 web optional chromium-l10n_25.0.1364.97-1_all.deb 9a8f41bcda381119eddf3febb49f6322 806980 web optional chromium-inspector_25.0.1364.97-1_all.deb 79e4c1ce9739cec29b950c0d3b835257 39127230 web optional chromium_25.0.1364.97-1_amd64.deb 2914a02c0c11efffddad4e3b63b107fb 412509354 debug extra chromium-dbg_25.0.1364.97-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlEorWUACgkQNxpp46476apvGgCfSWFNp/Il7qamQnxYTT+mbQOq taEAn0MRxwJUPQT2bhzDWfjdmBBktoKT =xcDJ -----END PGP SIGNATURE-----