-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Feb 2014 04:03:23 +0000 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector chromium chromium-dbg chromium-l10n chromium-inspector Architecture: source all amd64 Version: 32.0.1700.123-1~deb7u1 Distribution: stable-security Urgency: high Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromium - Google's open source chromium web browser chromium-browser - Chromium browser - transitional dummy package chromium-browser-dbg - chromium-browser debug symbols transitional dummy package chromium-browser-inspector - page inspector for the chromium-browser - transitional dummy pack chromium-browser-l10n - chromium-browser language packages - transitional dummy package chromium-dbg - Debugging symbols for the chromium web browser chromium-inspector - page inspector for the chromium browser chromium-l10n - chromium-browser language packages Changes: chromium-browser (32.0.1700.123-1~deb7u1) stable-security; urgency=high . * New ustream stable release: - High CVE-2013-6641: Use-after-free related to forms. Credit to Atte Kettunen of OUSPG. - High CVE-2013-6643: Unprompted sync with an attacker’s Google account. Credit to Joao Lucas Melo Brasio. - CVE-2013-6644: Various fixes from internal audits, fuzzing and other initiatives. - CVE-2013-6645 Use-after-free related to speech input elements. Credit to Khalil Zhani. - High CVE-2013-6646: Use-after-free in web workers. Credit to Collin Payne. - High CVE-2013-6649: Use-after-free in SVG images. Credit to Atte Kettunen of OUSPG. - High CVE-2013-6650: Memory corruption in V8. This issue was fixed in v8 version 3.22.24.16. Credit to Christian Holler. Checksums-Sha1: 2fb54b1cce7493ab37b17de7bb19fc79c90a1680 4370 chromium-browser_32.0.1700.123-1~deb7u1.dsc 66d735ca6cf75d83616b5a9abb5b24f4e3a0d7d6 651260352 chromium-browser_32.0.1700.123.orig.tar.xz c44df3368ec8033c835c79f24cfd992713d7cc5f 257293 chromium-browser_32.0.1700.123-1~deb7u1.debian.tar.gz bb993a88bae103257e44f9d7d5ccd10e01e5f8c1 162658 chromium-browser_32.0.1700.123-1~deb7u1_all.deb 76bf5aba7445c36b17d39f86836ca3d50ed9d0a4 161940 chromium-browser-dbg_32.0.1700.123-1~deb7u1_all.deb 9ef0b3b6e11cf9648477279cede661c0b81e63ee 162104 chromium-browser-l10n_32.0.1700.123-1~deb7u1_all.deb 19e371826e1964d9c73e107f4f8b75f617db9187 161996 chromium-browser-inspector_32.0.1700.123-1~deb7u1_all.deb fe4397b5be0a96c39e825f6bfec97f4fdac7b42a 3072346 chromium-l10n_32.0.1700.123-1~deb7u1_all.deb febb26f3721950f3a132fa5ff44a1a6ece0c812f 704512 chromium-inspector_32.0.1700.123-1~deb7u1_all.deb 08c9ba9cb325d97daf6965d10a3a693867189582 52638086 chromium_32.0.1700.123-1~deb7u1_amd64.deb 9dec480c906f03da012e8ec27935101b08a98c2e 515617648 chromium-dbg_32.0.1700.123-1~deb7u1_amd64.deb Checksums-Sha256: a58cb3be907ed06e7c0d206b5e61d454f8e98ec927237d4656bd7da76677121f 4370 chromium-browser_32.0.1700.123-1~deb7u1.dsc 0554691395e64f42655c8521293076adde1bcbf153c4adeca99f965433b3886a 651260352 chromium-browser_32.0.1700.123.orig.tar.xz fd4b1a1ab977c313990cb2b7c04ef9648cc502fe2fcb6a89276d40e71edc1038 257293 chromium-browser_32.0.1700.123-1~deb7u1.debian.tar.gz 1bac524cb06c9da4465e65cd84e205dfd1b3b0464d29c39ad9e57954f36de4f5 162658 chromium-browser_32.0.1700.123-1~deb7u1_all.deb 36e3c826ec8528c3bd110e7bca117ab213403b00a1b0c807ba04556fa1de4a65 161940 chromium-browser-dbg_32.0.1700.123-1~deb7u1_all.deb b6652bb693acd0426199550b9257a1e7d1cdd187425bbafb2c6a4b07148bbd25 162104 chromium-browser-l10n_32.0.1700.123-1~deb7u1_all.deb 3e9218f5f048cd3a8a4293b9f3f55586cd480e9117a7afa6b615f85c7d1fd1e2 161996 chromium-browser-inspector_32.0.1700.123-1~deb7u1_all.deb c382b1d0eda9935c1be9d29603f27f7ceefc15ef8681fdd40ed18281498a310e 3072346 chromium-l10n_32.0.1700.123-1~deb7u1_all.deb ead39fe3142341221b56a765574386270e66e363b0cb80d891e0b36967fb21b1 704512 chromium-inspector_32.0.1700.123-1~deb7u1_all.deb 1ea2fc45cfae440404c817f8304cbe1897d025bd6151d1e7f329972510375c38 52638086 chromium_32.0.1700.123-1~deb7u1_amd64.deb e7e84624867729825a1b527db4fbfcc9923c047b9e65af02f68fe115b98f4d3a 515617648 chromium-dbg_32.0.1700.123-1~deb7u1_amd64.deb Files: 8078d542c2645c843280846e3a94b376 4370 web optional chromium-browser_32.0.1700.123-1~deb7u1.dsc 99e51031ef2d07199322f524ab1de9b8 651260352 web optional chromium-browser_32.0.1700.123.orig.tar.xz b1dec43c3b92d49593e16419aab09b6e 257293 web optional chromium-browser_32.0.1700.123-1~deb7u1.debian.tar.gz 2d1c2405aaac6616288e078021a6fc2d 162658 oldlibs optional chromium-browser_32.0.1700.123-1~deb7u1_all.deb a38b3748ab8697625bf9837f517fb787 161940 oldlibs extra chromium-browser-dbg_32.0.1700.123-1~deb7u1_all.deb ea446e7f641756009d5089da01515cb4 162104 oldlibs optional chromium-browser-l10n_32.0.1700.123-1~deb7u1_all.deb 91ce3570a0d6aa2b5a49fd909fc31253 161996 oldlibs optional chromium-browser-inspector_32.0.1700.123-1~deb7u1_all.deb 8bc5a5235166f48f50a3dca22403a4e6 3072346 web optional chromium-l10n_32.0.1700.123-1~deb7u1_all.deb 20ae67ee07bc2142ca5d7e9394d8435b 704512 web optional chromium-inspector_32.0.1700.123-1~deb7u1_all.deb cbc96fec062418988a102d83dee4bafa 52638086 web optional chromium_32.0.1700.123-1~deb7u1_amd64.deb 7f9157bdb5b37a685b7e8ba0a183a236 515617648 debug extra chromium-dbg_32.0.1700.123-1~deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJTAGJqAAoJELjWss0C1vRzKy4gALGKnrfLNv7g/lMQ+y5WvZ5/ ckybfWrLO1CTUatIJLAeYSCWKs3ID/azyw7qiScCq7fVelAkfSp9Z1zZ7aGdZeK2 esxTRfxwiZgHfEIBv8v367z57etdTxD+/8p0kxGaofKsO2x+kE8rg8G2rR/3NKtp YwC6/2irW1Gby712HHvbkvdyG4Ubv70rMbXyKPnzCiQGvenitLONzzABpNvi38Rr apyXUYpMXIHHkJ8PZRM+Vz3a0YKQFeoGizm4PuNhXegKIZVN53I3/OoLZHJxtJm5 oVPN6lUVH4XEaL+HTNEXnFSUbLfXYFp3PjT4LjWf49yexUsRwR8leBSWIxk58WeW t3XLLNPulkgpfJy+nTRQu1tVgzXp1Ho3L4zlngcq/54Dw5JG83kGicIaafMX3Kxg WtiR3Q8iFA5xx5kPushxrTrWUkAg5nefifI4iOIqhiPmZeYSQ5N2uskMlkqz2ltI vHmEjxXBZOQmMIELnlh/JM23j8O73/YtRyq4qaU2U3jVeQQQ6K9gLd2rW1S7VuG4 EM80sRVlwlNH7r4BAUnuKDm0o+9xbQrOrmqeGGfrQkflR4MS+FXa4PRVLKXM566S Bg6e2nhXNfoKtRApmgtyTyc0scm3w4Q8tLzMLn8YDoGoOywtaQggSDsHK/VjusYg 6sRC3eg5vKBpMr5Nojes3xnfHub3u4LQtAnc4NxN5pOTB1UDtoO6T53XrMUWfYtF 3Yza+3lmYIqvMh4CCe0G4vbp32CrUpBLixdP/UHsrANGilbywgkWG8KHbMIwU4VR Inzyy8oe1yHM8MFzYfH+fIFTEUYY7YOqSf7pCS3kM9etWy3PzcLziK45HFv9l9b3 CVZgJrIQF+j7AXsp49SgPPXPiRhwXv8ICa8n5M7Wz9VBjk1RuXVjMVfVCHuWhK8t ZsqbyNHlISiykkFAI0+Ttciz0mNboFH2Ijo3W+4Z+SaQm5BWll95Om9ZK0Udahr2 3q+kDBEB0Oyy4H3YjaiG8d9PhgQBI4NcjdSxOoi4I1QYZ+AJIgjrOske1s8A1kBB f8r6iD7nYSKbUuWg5IS67fTDto4tnbKZVE3sgrAQMZoqAiFx4uaCLzfjZD2JFBBQ oJ1rsiGyKok8gtjwIIPKfyeezAt5UzMNhmM1VAQdZBr8d67cD3fzz4nWFNc+wSh6 5K0G/4sgY5pYjM/a563VU9fGhtimtzoX/U8+XzDO/Y09rM5Ft/sN20uWfBohrZlo QkD3aTvSqHU3dQ94UQAoD/eOsKMiFxDTaVCBn79vBAsg4kqO+hMGDCKNOCGj+yTE 6g1E3qdOAeuXgF/gT5eiWwO6FGkxu7YQPeiAUMalCdVOiEcihDiEANEuX8bOSKo= =KaG6 -----END PGP SIGNATURE-----