-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Apr 2017 23:20:29 +0000 Source: chromium-browser Binary: chromium chromium-l10n chromium-shell chromium-widevine chromium-driver chromedriver Architecture: source Version: 58.0.3029.81-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromedriver - web browser - WebDriver support transitional package chromium - web browser chromium-driver - web browser - WebDriver support chromium-l10n - web browser - language packs chromium-shell - web browser - minimal shell chromium-widevine - web browser - widevine content decryption support Changes: chromium-browser (58.0.3029.81-1) unstable; urgency=medium . * New upstream stable release. - CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong. - CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani - CVE-2017-5059: Type confusion in Blink. Credit to SkyLined - CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng - CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang - CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous - CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip - CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar - CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani - CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu - CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani - CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman Checksums-Sha1: be918b082b241d5969a522bc5c10c4911598d3a0 4324 chromium-browser_58.0.3029.81-1.dsc 1308ffbbbbb26b69d1ca2f62c0e32d719cf1f2f4 423701524 chromium-browser_58.0.3029.81.orig.tar.xz d8484b99d68d9b142ed3fd4ca368dde552a6b1de 131648 chromium-browser_58.0.3029.81-1.debian.tar.xz 8e23de9517e0824f74523cee48f809977ab9c480 19338 chromium-browser_58.0.3029.81-1_source.buildinfo Checksums-Sha256: 723b415733f923d92a0e027832c98daf640c573205b73590e2a59e5a5ebb0d76 4324 chromium-browser_58.0.3029.81-1.dsc 3de5ba35f6d32e09c7ca4554efa509a6e54bb0a2d833230c1ebf033b04a120f5 423701524 chromium-browser_58.0.3029.81.orig.tar.xz 57a3cbb52ffbae3e79254685301a632f90368bebd421678b31c8b927c843710e 131648 chromium-browser_58.0.3029.81-1.debian.tar.xz 83f5dbf2f8a2f819e8204d193c87ba995ff3636e409151314ac400596165fc01 19338 chromium-browser_58.0.3029.81-1_source.buildinfo Files: ecc5e542f55c47b80c2599c203c38a07 4324 web optional chromium-browser_58.0.3029.81-1.dsc cc5fbd0a4f7ccb1daf6d8445af97ed26 423701524 web optional chromium-browser_58.0.3029.81.orig.tar.xz b55f2e150645b32237ffffedf89ba660 131648 web optional chromium-browser_58.0.3029.81-1.debian.tar.xz 1f4498730b47e96372ed5b20c4c700c2 19338 web optional chromium-browser_58.0.3029.81-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEluhy7ASCBulP9FUWuNayzQLW9HMFAlj9FmUACgkQuNayzQLW 9HO0+x//YMrFSIzAA1dHIyJruWw8w8qiPj+bIn2ht2UKusGpjoW+ycRNUg8SUR0h nH6DCLzf4DSy9Rs0FNQImiBk2Halq6X5VQGhEpjMl7BWGXFE/Y8L8lnHyQO9kUPa ThFpo5EYXgSxh2fnCsO4KYVjMJfJs5K2yluKCb9NmOKBHBGtkU9WP3+MhYVPbyef WJg3xhEmXwiM8aBndPhjP3t0mrTHhButrdqxwkcP1BEjg18k594bVOMX3Brc2MtA UF/nYT5bCtzW4eS65Fo0x55Nfpyn9w/gjrSspaaUGPt+0BhmEJnU+ZU5lx2bOKdg L5Z7ZgOtGaE+jerLZjnLjEJr2GggfzYgFy1BJH7eyNfiFtrwEqchd8Ja8A+N3RSD 6Y8WbwcIqebmtDgTg+/EJ3lvaAxe3ku1zOJWLAAMPa7HsrKm3whQjNztAT12zhls SUoALQ1mpOdSrrvRJw18ZpKXLc0RkWmbXdWz+ThFtM6xZoeHMTjdhH6600LtW1Op sMZnvEeJY0q6wM59i5pZi6nHy98Zq2WJhdKY34mQYAVL1Ql7ymITOwvffO+psKdL bxMqelxTZn660R/G24lrKRYdEkrHikRvrtpzbKV+vx5mf+7HwMpTUy6WoZSA1Fs/ aLbVF6xpVJGhTfyl/ddgo4OHEQz46Nj+JjIRE0pHTSZcXABNO+3YqEVOB/51hjCN TIMpOmTFw1QOAmMuR+3DKdLMTkMwIPBtuLy2OmvP0DN1kwAQdMlZaeDCvvKd6pDv enqgNBdsCpfi0/mO06mw1BEssmzsimQstujvSwhrCQ3uczmjpJ2OwOKpK9ZEhrhk 9WZjBhQKHDGrU6MIv0QzBLQ62Wya1J3tjiKTRVTuPzwe0YAttI+NQyNp5RInVOkJ UEuV3QmZKcFW/SE7X7qRHzxPJVxw0TZyYiDFl5mWWRzxFlO9HMFG8+WSEpLWjfn3 GECmgTQayFIHNHOKFeblagUSpVjFToFr2DWAM2GzM8zo7BuEdqSLLYwTQ2xxOfHm pjmf+atYpuFte/g/15LOFUSz2quV/bEBEtATIV4lUu28uU+a/i9qCJGowRUj72Aa /41s5rfxLt3XB7B614LP+Ep9h/m1cFose0HBe+Vs7flPEe9A8lnvxA5oXmptxPxH uzLCX86Q4sVajgPRnEQDFpdrFoe+CnrcKwdEO3BpL15ydoySfLuUOXAlCjRsGqm7 2QK5yjqB9Sf2CJ5GtDgsy0KSam6yzcP1mnpOR17ofUEj9f1WRvXa/52oLKgEJP7M ZPHy+vNQhnNr1iikxHPbM6Awz79oUuMl3MKcgQyiUZM9BduPzImnnxR+6snyIMXX VWcZPq5voS2/Riu51fXo6TUPuWaS9g== =j97r -----END PGP SIGNATURE-----