-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Mar 2016 23:47:54 +0000 Source: chromium-browser Binary: chromium chromium-l10n chromedriver Architecture: source Version: 49.0.2623.75-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromedriver - web browser - WebDriver support chromium - web browser chromium-l10n - web browser - language packs Changes: chromium-browser (49.0.2623.75-1) unstable; urgency=medium . * New upstream stable release: - CVE-2016-1630: Same-origin bypass in Blink. Credit to Mariusz Mlynski. - CVE-2016-1631: Same-origin bypass in Pepper Plugin. Credit to Mariusz Mlynski. - CVE-2016-1632: Bad cast in Extensions. Credit to anonymous. - CVE-2016-1633: Use-after-free in Blink. Credit to cloudfuzzer. - CVE-2016-1634: Use-after-free in Blink. Credit to cloudfuzzer. - CVE-2016-1635: Use-after-free in Blink. Credit to Rob Wu. - CVE-2016-1636: SRI Validation Bypass. Credit to ryan@cyph.com. - CVE-2015-8126: Out-of-bounds access in libpng. Credit to joerg.bornemann. - CVE-2016-1637: Information Leak in Skia. Credit to Keve Nagy. - CVE-2016-1638: WebAPI Bypass. Credit to Rob Wu. - CVE-2016-1639: Use-after-free in WebRTC. Credit to Khalil Zhani. - CVE-2016-1640: Origin confusion in Extensions UI. Credit to Luan Herrera. - CVE-2016-1641: Use-after-free in Favicon. Credit to Atte Kettunen. - CVE-2016-1642: Various fixes from internal audits, fuzzing and other initiatives. - Multiple vulnerabilities in libv8 (version 4.9.385.26). * Set use_sysroot=0 to continue using system libraries. Checksums-Sha1: 60fefd2237862758e1c62a53a947224a0ec950d3 3887 chromium-browser_49.0.2623.75-1.dsc ae8c320bcf511afcc691bd8a8ed1946848ce56f7 452527444 chromium-browser_49.0.2623.75.orig.tar.xz 464f30f047bff9d371483983197718a8715da34a 119120 chromium-browser_49.0.2623.75-1.debian.tar.xz Checksums-Sha256: 183483cb09eaeac19a9e67d37d6e138319418c62d0fd303368c96cd3022620d4 3887 chromium-browser_49.0.2623.75-1.dsc 687e11ab1353c082c176ee7fb60389f69a61c5856de812fe3ceb29ff93c49c56 452527444 chromium-browser_49.0.2623.75.orig.tar.xz 215233049f5054c3a76ab8f5879f950a9f02e6d9af654e114f76b6e9a10cbe08 119120 chromium-browser_49.0.2623.75-1.debian.tar.xz Files: a2ba5a9f6258ebea5f1a925db17f8512 3887 web optional chromium-browser_49.0.2623.75-1.dsc 858e0a03e836cab5c062343584318f5b 452527444 web optional chromium-browser_49.0.2623.75.orig.tar.xz 261cfd558e19c0b554144ce5ff2d6d05 119120 web optional chromium-browser_49.0.2623.75-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQQcBAEBCgAGBQJW16YlAAoJELjWss0C1vRzqlQf/2iQz4gRHouLx2J9oLkbF+FN KaE79UFGvuH71b/k05eLhcwwlefNgC4dj1ZlGcKKqgPlsPvh1Mgp7Hl6z6lTwZ82 V588fZxO7zUlmrPrXaZbXLEVsOds8KDyTzG6ZDX0Ut4IuYe17gT2B8eGTkjsru7u 2XB03+oi1HqTu9Dtje+y5MWoDNSFEcx3Fiw0rKdPNEn5T8znxQGlsvqSw/0Gh850 Gb/Or1WWdI2Kz2MqUGbdo7aBG9IaQrGGiRbSDu02fXErSWtjPKmwNir4P38Ccqvk QFNbqcWqj3FOF81M+ZIUO6UViC0f3hyGY+/QLzT7WUqaud2F5T6l0+QDGegKljOy eGupOQ2uTDY+l+vtl2aMIm6acI5cBj1sA6svQkP+FBEnnrii3YsrGMVQegnCc/gi BHzcbOf52+Iy+lJGHgC66XBAsfvl3YWCUpwa1sX/r0zzb4PnOT19k6UvzkuTRhAZ HCfva8kD615NqNbsaoYe4uHHJZKKrMYKbU17ykh5S7cvrX8GG8CJ5aXDSuq8tNnk pewytVuzebutzrDuHqCPtL8xHfhPh6vqoaXvSj1o/zxst/K5RQuXh/YTpdNd1Gw0 1Dt016/qjnR/A4dFzKdZOBJlLbK5WVZJY8RRpS+TatwdzI+uqP2Wk9vx9NmJ8PEJ unt1ter4Bj3RNEmVx2YAFkm03Azykfh1G12lfPeCH1RNz4XSnsDxGRCD+V/72RSk qSmfpX4s7V7FjHGmyIwhUZO7qeUGdbebga8M5Y0niMNPqL5pdemoPIs4jrXFdyqU STOJWEz390NCd6qoZQjhvtk9VCKbwN9ZdI+I0rdgvIiY7gn9bAfnkuF5qz1TdH8T Tvqbksxpl5dE1MkK7/XYHWBKdAxwjlYRuW3YDwE6zTbgm2Z6s4OciTsX1KqoybBU QR0PXjgfI/oGdvp8Ut/zMaRTBvv4nCHasUsvINmHXHLb3/kKaltyrSP+O+4Qwx1P QP6GCu8e1fuR9+bhWfGLIKN6EHX0tLUZ/41NSXXnYsBaRBSBbMqoA39IXX6QSVMO 5z8gbUDkxIxmTovs2C8NzcMKrsp7TQ85fANXFHsKQZR0A7cjeGEHfdRRhoGM89DG SuMGkEKlfyLpBveLDKhscTfnjlkWqR0szR27qZpaA2Ahkcy8diinvAF5cqvAl5O2 63+/+eXQQQKR1qkNYL9WswDQL4+bMDt6gBUZloN7ndltxe75DQFpWu4XmdQfgSJZ 23jwq3N1/GMe0SGhYBOgiOnK3//D6zL4nU3HjHKY1vlLvGqnbp7cWJ3RLIawKYBb ypY5jVe2lr/1l5FAFhSB5MsN8d5uVbhgAvgo4ZX5MFPVtJvgQKysos6FiKiGaVo= =Sz2n -----END PGP SIGNATURE-----