-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 May 2014 23:15:51 +0000 Source: chromium-browser Binary: chromium chromium-dbg chromium-l10n chromium-inspector chromedriver Architecture: source all amd64 Version: 35.0.1916.114-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromedriver - WebDriver driver for Chromium browser chromium - Chromium web browser chromium-dbg - Debugging symbols for the chromium web browser chromium-inspector - page inspector for the Chromium browser chromium-l10n - chromium-browser language packages Changes: chromium-browser (35.0.1916.114-1) unstable; urgency=high . * New upstream stable release: - CVE-2014-1743: Use-after-free in styles. Credit to cloudfuzzer. - CVE-2014-1744: Integer overflow in audio. Credit to Aaron Staple. - CVE-2014-1745: Use-after-free in SVG. Credit to Atte Kettunen. - CVE-2014-1746: Out-of-bounds read in media filters. Credit to Holger Fuhrmannek. - CVE-2014-1747: UXSS with local MHTML file. Credit to packagesu. - CVE-2014-1748: UI spoofing with scrollbar. Credit to Jordan Milne. - CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives. - CVE-2014-3152: Integer underflow in V8 fixed in version 3.25.28.16. Checksums-Sha1: f9c10728ed01759dcd8b64a6893eddbaeff78066 4125 chromium-browser_35.0.1916.114-1.dsc 99342ed61a2c3c3f13bf1222d59aeaaba713b60c 818696376 chromium-browser_35.0.1916.114.orig.tar.xz 900149c5ae3c2e69fbc32cb693f5ae00e4af3a34 203256 chromium-browser_35.0.1916.114-1.debian.tar.xz 24a27ed32f29cc0c1a648631723770f0b7bbab6b 2928572 chromium-l10n_35.0.1916.114-1_all.deb 67dc44a7415315008edcfa724d00579661302901 724946 chromium-inspector_35.0.1916.114-1_all.deb ae0fe684b73fc330a05a3349c4862d298761fcd8 35733162 chromium_35.0.1916.114-1_amd64.deb ebb12135997a164a0c9d13ade8742066dd50c873 635893310 chromium-dbg_35.0.1916.114-1_amd64.deb d1efd777f177a753e7d93e41c979d999041b994c 2125984 chromedriver_35.0.1916.114-1_amd64.deb Checksums-Sha256: 548ded08b07ddb0e668c7be37e41a708f22a4d08eb0d126ace5e1da1a93d894b 4125 chromium-browser_35.0.1916.114-1.dsc 418d28b4fb7c0179c44350ceb85a6c10f51626bc58d44a49def6f2e65305ffc4 818696376 chromium-browser_35.0.1916.114.orig.tar.xz ae630288b701d96b25b3c5cc9c96418594b35cf92f270b412a46b6f59d1ce1d8 203256 chromium-browser_35.0.1916.114-1.debian.tar.xz 3a7df45117478c303e10b259fd07b1311eab6887a758ba53c6d84a449add98b9 2928572 chromium-l10n_35.0.1916.114-1_all.deb 3566734bce6a5dba3e44ccdb521a11989038eb738a56268d646fb549cd40772a 724946 chromium-inspector_35.0.1916.114-1_all.deb 518571819372906662cc3ce1acdc03cefa7bfe6e099c9dcfb081f80d26d2e0d5 35733162 chromium_35.0.1916.114-1_amd64.deb d1af3bcd752a8ca772b5e283123ac42a81cca5c1a82fb3c59e9373aeb8ab4fe1 635893310 chromium-dbg_35.0.1916.114-1_amd64.deb eadecf439208fd07b0311636d0349af29c950c2bc23c719e8d1a4e6a74676bd0 2125984 chromedriver_35.0.1916.114-1_amd64.deb Files: 839536d0d47a1af721007a0cecaa9f1f 2928572 localization optional chromium-l10n_35.0.1916.114-1_all.deb b82c73e84099b73280e6c4ebb9169a68 724946 web optional chromium-inspector_35.0.1916.114-1_all.deb 72afdb426b4ccdbc155b454010a62356 35733162 web optional chromium_35.0.1916.114-1_amd64.deb 2e3abcbca2f4d3e2b589582421a8f084 635893310 debug extra chromium-dbg_35.0.1916.114-1_amd64.deb 7e7abcc4e9ceb597af505ee36be3ba7d 2125984 web optional chromedriver_35.0.1916.114-1_amd64.deb 7ff8cf0031a27c40ca5233eb618629b4 4125 web optional chromium-browser_35.0.1916.114-1.dsc 838b5a5ab44a6d9012fa8f534b03c89b 818696376 web optional chromium-browser_35.0.1916.114.orig.tar.xz 8b9237ad9974af8abaf21084b71d01ba 203256 web optional chromium-browser_35.0.1916.114-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJTgWUyAAoJELjWss0C1vRzavQf/i76GswDu2xhGL3GOkiNOWhB iVEudieyVUOnMUAP4WFp65BreRMbrzC46aXF/e7Wfap1LH4vONFBeUHxcwd0Zi1Z mtz2PpeGqL8+CDZxxab7yWfPgKbCqwtd9oGwQFyR5VCpsIN6u3qeI3+FfrXRty20 TQ2qkR1EvzjDRID2W5aJOhoYy4Wmfml9vbsMVnxPjaUv8sbBFaqHHxOvI/3WUliu aVidcuvu0UAuyfNHWpr4LLuUQvMX//dpCY/OH3E6Lda7omoHNDm4sx5+HEdpBxgl CIyMS1pDXNeC1q91mo7ovA53EsUF0TGDLipzjhZiiDZQ4YDbLC4g/DtQ1e1gaTvs n52ae2oXLdHKX/T0AfTAfyQJtdz9WxECQipcgb3meSVQPov03khnzdtbJZinNJJF EDe3OpEaKtDPbWKZ9c8Rd4G8FTkDfcTLZZ/xO4diHMebivW0uPXBJ2sbcEm3xUxi 8f6dWarQQqSJaNbBdeVZ0RwxP+/mcr75yInDm8SAe9c0r7p3y9dqB4ZvKLDwMp6p cQ4gmfvmrVJEYQuV9mKTFQZOV/f6z7HYeU4iBqTxps2wv2bd8nVKLc9+9kxBzQV9 eqzPCHk9EH21sz9s45vW7lkem2JcFmKqh2a5yMI0CVR/MOWqFzsXbXVxJ2lRRxkb GkXzAa7zh2Mhz/rWL7tVm3O8VhqgKzYrrS+8iLfq3yxntXC+TM1da7Wm1duK8xsc skA7y9nhM/haf/rhS4PcY0BSzwr7pE1XQTRl5Cu9DCOVjGhA+njHk/n+PIeSXys/ 4ANKRMkcafpGU/3BHl/ESHIo3GMAY+3QyeWwEiZFwjeVwV7SewLbltTK1Jmk7Q8r 3QCb5ijPUCuBT0s8mpnV+xHnh/Masa4S4nCScuXOKadMYMjtshoSGBCOf2ydjxC2 LKXwZ/epw2Oumv2FeIkPNA2T+t7p4RNBu5TtpPiNoUaYJ3P7uMoOoktu+aKgXt9y uH6mjegaurwif12dCVVKI8KNn/RWkX1AjBsb11ZsEhoUKcq5mQnf5bzgEaDczMPY APBcFTx5ZrDicI8K+7s1f4q7b/rtL9/WKQxWD0hUNURvstfLODnxMTCn6oN+CRxL 13uRh1it0TCsUmldwbxcAkMsCmyLJLc6gimAzw0xGm1OAsxYs1V4zMo6RK4QJ209 UwJRW0pBjx84uy1zukqOlsq/Rsq5EAG7VVJdW5cRfFc4jaZNQBOSbqC7GOpcNvjJ Yu0PcFLHKfJIONxwdCtvKx8IFH5RbxW3o7wTB0DTzmlWLxawi/v/CUfGrndmwpf7 dgZfEl+kGQmLQapGCTGsXuIrk4pzt3STkBv0d/nfcdwLthvFwLsS3h79C0rwbEM= =za33 -----END PGP SIGNATURE-----