-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 05 Mar 2013 11:14:34 +0100 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector chromium chromium-dbg chromium-l10n chromium-inspector Architecture: source all amd64 Version: 25.0.1364.152-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Giuseppe Iuculano <iuculano@debian.org> Description: chromium - Google's open source chromium web browser chromium-browser - Chromium browser - transitional dummy package chromium-browser-dbg - chromium-browser debug symbols transitional dummy package chromium-browser-inspector - page inspector for the chromium-browser - transitional dummy pack chromium-browser-l10n - chromium-browser language packages - transitional dummy package chromium-dbg - Debugging symbols for the chromium web browser chromium-inspector - page inspector for the chromium browser chromium-l10n - chromium-browser language packages Changes: chromium-browser (25.0.1364.152-1) unstable; urgency=high . * [8761d73] Remove armel and armhf. We cannot support them in wheezy * New stable security release: - High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. - High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to "chromium.khalil". - High CVE-2013-0904: Memory corruption in Web Audio. Credit to Atte Kettunen of OUSPG. - High CVE-2013-0905: Use-after-free with SVG animations. Credit to Atte Kettunen of OUSPG. - High CVE-2013-0906: Memory corruption in Indexed DB. Credit to Google Chrome Security Team (Jüri Aedla). - Medium CVE-2013-0907: Race condition in media thread handling. Credit to Andrew Scherkus of the Chromium development community. - Medium CVE-2013-0908: Incorrect handling of bindings for extension processes. - Low CVE-2013-0909: Referer leakage with XSS Auditor. Credit to Egor Homakov. - Medium CVE-2013-0910: Mediate renderer -> browser plug-in loads more strictly. Credit to Google Chrome Security Team (Chris Evans). - High CVE-2013-0911: Possible path traversal in database handling. Credit to Google Chrome Security Team (Jüri Aedla). Checksums-Sha1: acd3e64b8f289dcc0a1fb9adfd5708290fa4d2fd 2997 chromium-browser_25.0.1364.152-1.dsc 5afe3fc2b455db3fe43e3285a5489439f671b7a0 641303292 chromium-browser_25.0.1364.152.orig.tar.xz f6514c3047090f17716385a14e774fa55844f717 256431 chromium-browser_25.0.1364.152-1.debian.tar.gz c360d10350d3f95782e3a8923458b0393feab83e 159782 chromium-browser_25.0.1364.152-1_all.deb 8c55f84d337b37e354e9055145a61605316a97f3 159070 chromium-browser-dbg_25.0.1364.152-1_all.deb b2aad424dc932094d625e98f01094d0aec5d2eab 159202 chromium-browser-l10n_25.0.1364.152-1_all.deb b12d994dd0f20fef3988157061e86a66701e70f4 159024 chromium-browser-inspector_25.0.1364.152-1_all.deb 98b94e39abe0e4d9c2cbe3ab03af5cedf2cb477f 2615398 chromium-l10n_25.0.1364.152-1_all.deb f975e0709319cd14047bea7e483394393683329a 807222 chromium-inspector_25.0.1364.152-1_all.deb 95c58c584569ad7fe54226233165c7733820c632 39133156 chromium_25.0.1364.152-1_amd64.deb 6c036f5d3f5be745b34180de5e9b075fe94463bb 412604980 chromium-dbg_25.0.1364.152-1_amd64.deb Checksums-Sha256: 833b0110e4fe0e9f6db763a7c3fd74d81dd9429f447eb7bc23a7896bb9edde77 2997 chromium-browser_25.0.1364.152-1.dsc 6bdc8587ed950503e98b8593f60914d89803cd9209d27b7394806daab0f6c14a 641303292 chromium-browser_25.0.1364.152.orig.tar.xz 93ad8e618e9b19bb7b9d4b250575470a6e67662a227fb8df021aa4de3423cd3e 256431 chromium-browser_25.0.1364.152-1.debian.tar.gz 8681888ec14bff2748e7bd39f775e1a08a6b1c6036b23dade81153e86192b0df 159782 chromium-browser_25.0.1364.152-1_all.deb cfa0b75c11eedec3b2c8519ea4f0dad67d93da234b91a594b30fbd4dc99d9037 159070 chromium-browser-dbg_25.0.1364.152-1_all.deb 4be8568cf62b8780973978dc3860060745acbc383f6132b2d3f4a08ffb23f5e0 159202 chromium-browser-l10n_25.0.1364.152-1_all.deb 526fc989d5fea7f39e75128fe45cde59a0bfd773f86aaeb57ca32ed1fda0f838 159024 chromium-browser-inspector_25.0.1364.152-1_all.deb 9a7b8271bf6ce8535af8029c2a805e18c8818c28c412997063b485870d5876d9 2615398 chromium-l10n_25.0.1364.152-1_all.deb d322b6c0ae21ca5706bc1f712a9ae256e0f9c59a8bc4cd877f0235cd43afaef3 807222 chromium-inspector_25.0.1364.152-1_all.deb 6e1bb00e53426d0a869c27c2dd0279c534389f2c1c5bbb011815c0114c18dc84 39133156 chromium_25.0.1364.152-1_amd64.deb d73a1f902148c0c7b34ec43b4a7c18090c7e61dd069291155fa0a410329c8f99 412604980 chromium-dbg_25.0.1364.152-1_amd64.deb Files: 901cc13b3a8b304700c90b1c514c4867 2997 web optional chromium-browser_25.0.1364.152-1.dsc 229e025c0fac9cb202a8da611a790146 641303292 web optional chromium-browser_25.0.1364.152.orig.tar.xz 775d22bad7caf54a35c7cc80477c2ddb 256431 web optional chromium-browser_25.0.1364.152-1.debian.tar.gz 716b2db009ebd24817a284acd9cc6aa6 159782 oldlibs optional chromium-browser_25.0.1364.152-1_all.deb 24cb6dae9c5756eb64ec1be2a3579d94 159070 oldlibs extra chromium-browser-dbg_25.0.1364.152-1_all.deb 77322711323f0b491e3799e81361f748 159202 oldlibs optional chromium-browser-l10n_25.0.1364.152-1_all.deb 73447b14ef9276ae761c5352109233a8 159024 oldlibs optional chromium-browser-inspector_25.0.1364.152-1_all.deb 41914b31afa0a70dc58bb238d79c22ba 2615398 web optional chromium-l10n_25.0.1364.152-1_all.deb 07569f04db52e3ddd5679190c0e9b724 807222 web optional chromium-inspector_25.0.1364.152-1_all.deb cdffb049e53317320a5acaac77c34f8e 39133156 web optional chromium_25.0.1364.152-1_amd64.deb c5238f3b7adfd78888ffe433092487d1 412604980 debug extra chromium-dbg_25.0.1364.152-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlE13VwACgkQNxpp46476aqWJgCfX1UutwzmGMU1WASjEKxrUUHk JvwAn3Sk439NfTtqqbc/ebXAuL3o/+yc =4NnX -----END PGP SIGNATURE-----