-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jul 2013 20:34:19 +0000 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector chromium chromium-dbg chromium-l10n chromium-inspector Architecture: source all amd64 Version: 28.0.1500.95-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromium - Google's open source chromium web browser chromium-browser - Chromium browser - transitional dummy package chromium-browser-dbg - chromium-browser debug symbols transitional dummy package chromium-browser-inspector - page inspector for the chromium-browser - transitional dummy pack chromium-browser-l10n - chromium-browser language packages - transitional dummy package chromium-dbg - Debugging symbols for the chromium web browser chromium-inspector - page inspector for the chromium browser chromium-l10n - chromium-browser language packages Changes: chromium-browser (28.0.1500.95-1) unstable; urgency=medium . * New upstream stable release: - Medium CVE-2013-2881: Origin bypass in frame handling. Credit to Karthik Bhargavan. - High CVE-2013-2882: Type confusion in V8. Credit to Cloudfuzzer. - High CVE-2013-2883: Use-after-free in MutationObserver. Credit to Cloudfuzzer. - High CVE-2013-2884: Use-after-free in DOM. Credit to Ivan Fratric of Google Security Team. - High CVE-2013-2885: Use-after-free in input handling. Credit to Ivan Fratric of Google Security Team. - High CVE-2013-2886: Various fixes from internal audits, fuzzing and other initiatives. Checksums-Sha1: 21e17efaa452fb6d0197be502ef119ea38df415a 4320 chromium-browser_28.0.1500.95-1.dsc 89984edc35d7a44997851a5e75d860af3d1b33e1 1192468688 chromium-browser_28.0.1500.95.orig.tar.xz 12c88b530a71fc46d599a3ae448eddb14f986521 253830 chromium-browser_28.0.1500.95-1.debian.tar.gz 54c2ad74246f158244c2ec9607a4657141e942e8 161488 chromium-browser_28.0.1500.95-1_all.deb ffee06b42d38ae9b685efcfee568b2163cdc5335 160890 chromium-browser-dbg_28.0.1500.95-1_all.deb 654a533d060b95039043beafd0d941c1b866d587 160964 chromium-browser-l10n_28.0.1500.95-1_all.deb 83cca0408dd0134336028dc8d366d0c5a7ce8eb7 160814 chromium-browser-inspector_28.0.1500.95-1_all.deb 17b283a6c1c8f64dc346dac5651a84b0c70bdd62 2716578 chromium-l10n_28.0.1500.95-1_all.deb 22c3d8a371096e193df482e06ef9f7e54ddac2df 742616 chromium-inspector_28.0.1500.95-1_all.deb 16102a4ece046dcd3e31c2b8cef6d43b4c3193cb 31851214 chromium_28.0.1500.95-1_amd64.deb dfeb4539aebb31b1f4fb7369f0a89aca977f17ef 441998316 chromium-dbg_28.0.1500.95-1_amd64.deb Checksums-Sha256: f60a2e81eafad2ff854e43110bd4f0c9518c216c35e3583efc88108f545d7c38 4320 chromium-browser_28.0.1500.95-1.dsc fdd883828731b4c4faad5b6ed879abe41a14805689e379c94591fb18b85a431f 1192468688 chromium-browser_28.0.1500.95.orig.tar.xz f02cb352ce7ffddcb6a437ac8400dadf4c59610b4eea76e54b50992689d41efb 253830 chromium-browser_28.0.1500.95-1.debian.tar.gz f008d310465740867e19f00fe1c12bdb4cf4e89400b038a5e4c02e58c671ae6a 161488 chromium-browser_28.0.1500.95-1_all.deb ce0b8f8f14226d85954075aaabcea2d722d12170b60f76f2485a517fcea4bb72 160890 chromium-browser-dbg_28.0.1500.95-1_all.deb f1063e90a882843ef10de209c9ae77bd8a5c933a80a911c096eb2ed5ef8b3aad 160964 chromium-browser-l10n_28.0.1500.95-1_all.deb f363fc982646096aa21e1065d3eb479e530ef2ec385b56a6798d01de8725e260 160814 chromium-browser-inspector_28.0.1500.95-1_all.deb ab5bbaaff349e362ae12bfe2c061d44127c409a6454c3eb77d632d4af95f61cd 2716578 chromium-l10n_28.0.1500.95-1_all.deb 06297c07cb149fb9406ca8eaa7964a279fd7dcef071bbb8f2ccb5febdfe8a1d5 742616 chromium-inspector_28.0.1500.95-1_all.deb 6ccbf800492e99d8d3e7c7f84509d7d90199fd141f09283b0e6302e65e471555 31851214 chromium_28.0.1500.95-1_amd64.deb 97184be59e794d92449dd4efd4cb51467df92bae25f49ad2f23bb4c3af334a5f 441998316 chromium-dbg_28.0.1500.95-1_amd64.deb Files: 70c4d575d260fd35b49aafa518b9160b 4320 web optional chromium-browser_28.0.1500.95-1.dsc 535427e7812dc5af4f28d5a6195923db 1192468688 web optional chromium-browser_28.0.1500.95.orig.tar.xz 124cf0f900a4b045232a21f05b554e67 253830 web optional chromium-browser_28.0.1500.95-1.debian.tar.gz 680890f4238cdcd26b181007dc75135b 161488 oldlibs optional chromium-browser_28.0.1500.95-1_all.deb 10e74c6d55c69ba9ffd47412279a4cec 160890 oldlibs extra chromium-browser-dbg_28.0.1500.95-1_all.deb 5ab1e347edac3bfe4defa437b7a955d7 160964 oldlibs optional chromium-browser-l10n_28.0.1500.95-1_all.deb 6eb57fa8bc3c6b67d34662de4f55e943 160814 oldlibs optional chromium-browser-inspector_28.0.1500.95-1_all.deb 6b3f070b5df35c5282ec9fdc0c1c3957 2716578 web optional chromium-l10n_28.0.1500.95-1_all.deb 4adbdeb7eacec84ed806cd4514ef4448 742616 web optional chromium-inspector_28.0.1500.95-1_all.deb d31e843d8670b42bff19d154cc8ec0f0 31851214 web optional chromium_28.0.1500.95-1_amd64.deb cbed19a00c7eeaa3799ea5d72c44e262 441998316 debug extra chromium-dbg_28.0.1500.95-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iQQcBAEBCgAGBQJR+J/qAAoJELjWss0C1vRzZ3If/iqkhdjI2DN5MYo4xWh9Jk+t S0vSZCuCGJxPjAmot7IB9arxn8zLsz+sMYsZWSeSucKNAWaN/w+2OmIlTVZiHrWh CHcok54QJ8RVf7URWuW36CBqK1g7X2CkSBR57dh1bGSB7GV1iYUeaHdW4a54qdoN i2+raiRYJknxmG1CkqOeJ7QzaRSR5eQzNRdDwHEpr6m2NnRrQ8qziSBxsS7+WFCJ GUVj0nImyjwkxXQFsEQPdR1dsxTKNtUaK+kUdj5cBuh0QL8dFof7IXh5gRFzT1qj 4NMlEE3Bd6X/KZV401eyo33IfCPWjPqO5c0JVzXAC+bX4mXT+j+h4vJREYR/H4ug jAP3tmX6INP5+zG3zB8/WG54lGSiD3StjpW+EYI+biG8R5+D8vzXGofMiUUBcWmI svFjg0olTWfCOVRf8vqBLwIGJ2DvDLDvJ64hZalYarzGDpR+Ku0NPuk/taeLqQ0H WJdmVPTOOgWduPGtqIv6das/Z3iIUgxh5fgqg69ZbdLeINcptKtCwcDlptMFhUzK VVR8Oo6dWcZfFLAt8ppA9AXlupeMD8ujmxAoUCuxhGe7Dtj4NE0b08Zb8JdqukU4 +q3pkzoaUOFvj2oBp7mpQ797WHFl5o8mBKjpPONcMLUXbgKOdndSn/O2aEdH06kM fpdX1A8LQAGY6fHK21tuh0uVI4pn0jciI76S+ezM6jg5PZsWPbBseJK10YNj9G0j cUfG1tn+hnHNtPaoCRwswx/Zs+ZIp2z963GLY8fhWU6hEbxNU425bEErSfxn9efd 5jHOcKynTk0XqUPVdgooNsewrMIMSgyBSXnprDcufjfLRdYRLJq4lrcRg82KnthI 4n0a/J13lG4nJrcbpOQgC3Heb7oCAFaGBJJFJMxstaANYNzHNRao4DJ9yCLeSvO8 yQPiq8WOfWk+xfOZTML7/2nLdfaRLLAcNOGL4c5M00pP/52HEmasEFOxQaRPPeVW 8VQ462LjC4cXF5J6tV1Q6u/c/oJlkkB84flvW09kECEM+tSInrXhMDnJfZQ8AUd7 eecZNoPoRG0ort+PBjB8eL9Sx0BhXymNNNhcCPeVhpaX6KKQsVkizyslcfP2Z6Y4 bjt/mbHSKEkd1BBBA8hKIwfDUDMA8DC481xvl2iYY+1+hVSi6ywnpYWWNxm9PanA pzTyneFxmxcsSfv3o8tbvfjdjR3jCFYGyXSg4gU1c7UFzF6eNfndD3hin20ALkfH 347K8HWj23D6Kd46RydTBf8oA/Hzs7YpFaC53XZBCzh6+Cgn8YrA5fOgdyenYbt4 bIqjc7dY3vIaUrFjR4uZZdSA5093b1tgelPVnn7U7dY1Ru5b5h6c/Zuc+EcvMuw= =EFgo -----END PGP SIGNATURE-----