-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Apr 2018 01:27:39 +0000 Source: chromium-browser Binary: chromium chromium-l10n chromium-shell chromium-widevine chromium-driver chromium-common Architecture: source Version: 66.0.3359.117-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium Team <chromium-browser@tracker.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-l10n - web browser - language packs chromium-shell - web browser - minimal shell chromium-widevine - web browser - widevine content decryption support Closes: 892994 893799 895076 Changes: chromium-browser (66.0.3359.117-1) unstable; urgency=medium . * New upstream stable release. - CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson - CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson - CVE-2018-6087: Use after free in WebAssembly. Reported by Anonymous - CVE-2018-6088: Use after free in PDFium. Reported by Anonymous - CVE-2018-6089: Same origin policy bypass in Service Worker. Reported by Rob Wu - CVE-2018-6090: Heap buffer overflow in Skia. Reported by ZhanJia Song - CVE-2018-6091: Incorrect handling of plug-ins by Service Worker. Reported by Jun Kokatsu - CVE-2018-6092: Integer overflow in WebAssembly. Reported by Natalie Silvanovich - CVE-2018-6093: Same origin bypass in Service Worker. Reported by Jun Kokatsu - CVE-2018-6094: Exploit hardening regression in Oilpan. Reported by Chris Rohlf - CVE-2018-6095: Lack of meaningful user interaction requirement before file upload. Reported by Abdulrahman Alqabandi - CVE-2018-6096: Fullscreen UI spoof. Reported by WenXu Wu - CVE-2018-6097: Fullscreen UI spoof. Reported by xisigr - CVE-2018-6098: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6099: CORS bypass in ServiceWorker. Reported by Jun Kokatsu - CVE-2018-6100: URL spoof in Omnibox. Reported by Lnyas Zhang - CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools . Reported by Rob Wu - CVE-2018-6102: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6103: UI spoof in Permissions. Reported by Khalil Zhani - CVE-2018-6104: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6105: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6106: Incorrect handling of promises in V8. Reported by lokihardt - CVE-2018-6107: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6108: URL spoof in Omnibox. Reported by Khalil Zhani - CVE-2018-6109: Incorrect handling of files by FileAPI. Reported by Dominik Weber - CVE-2018-6110: Incorrect handling of plaintext files via file:// . Reported by Wenxiang Qian - CVE-2018-6111: Heap-use-after-free in DevTools. Reported by Khalil Zhani - CVE-2018-6112: Incorrect URL handling in DevTools. Reported by Rob Wu - CVE-2018-6113: URL spoof in Navigation. Reported by Khalil Zhani - CVE-2018-6114: CSP bypass. Reported by Lnyas Zhang - CVE-2018-6115: SmartScreen bypass in downloads. Reported by James Feher - CVE-2018-6116: Incorrect low memory handling in WebAssembly. Reported by Chengdu Security Response Center - CVE-2018-6117: Confusing autofill settings. Reported by Spencer Dailey - Fixes proxy time out error (closes: #892994). - Removes not implemented messages (closes: #893799). * Remove third_party/chromite from the upstream tarball (closes: #895076). Checksums-Sha1: 729e178031d03da25b96df318297095d5a5217fe 4285 chromium-browser_66.0.3359.117-1.dsc df0290e15e01e56d209bfbd2d6f47ed15ed21a74 409201024 chromium-browser_66.0.3359.117.orig.tar.xz 970947612edc4a5ec666d48e276928181886bdf1 154368 chromium-browser_66.0.3359.117-1.debian.tar.xz 08e52b25068f6acb31b4b209c741da741372fd56 19259 chromium-browser_66.0.3359.117-1_source.buildinfo Checksums-Sha256: a7055403b8383b13af9cc1cf9311a26fabce715e00c44a00bdceb3b2f80d4422 4285 chromium-browser_66.0.3359.117-1.dsc 2eec082092a1a6243e57eb3ef832a3d546c98fbc7c1a55447c2d3ee2e65006b1 409201024 chromium-browser_66.0.3359.117.orig.tar.xz c4aaf959edb58e96f453f5e8f1ce9337dd403b5338570e5ab047d136f11b5bae 154368 chromium-browser_66.0.3359.117-1.debian.tar.xz 9f2554a0a4035cf731ed534ddcce480e1e4eebb56f45c70122ddd0f2915706b1 19259 chromium-browser_66.0.3359.117-1_source.buildinfo Files: 175ca0a3d032e1a5fc46075871ff9e0b 4285 web optional chromium-browser_66.0.3359.117-1.dsc 0af3d1a542e642cf8011ba46ca595a09 409201024 web optional chromium-browser_66.0.3359.117.orig.tar.xz c8423cd6be8c3010c6b380c9b87bc4c5 154368 web optional chromium-browser_66.0.3359.117-1.debian.tar.xz 4d82361e5d1b9ee726fa9299902b894e 19259 web optional chromium-browser_66.0.3359.117-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEEluhy7ASCBulP9FUWuNayzQLW9HMFAlriWCIACgkQuNayzQLW 9HOqQCAAsAONpIimR0QeZNkOQYLfkJY3ylmWG3MCXU9vxp/vT69RPazXIVIC/JYK RgFmDvrNRTxxQOhN2ECO/e7g24aHeutTGpHnFV+0QWqIeC1nEGRxv2HDH4AFaU4w pBUujm1vW4t4A8/9kZJ9IoTXiWzIXSe9sUfMNwtLjGHy6NL/Hk5L2wqrhWtJUS1V xPQbVTASco4+NB62Kq6mGoP/eMAbKvw9qg0QSqqEWuEIo/vK4ZRkQqmwCtZA1wpl Qq0br8AtRyr9XLQ2vWXZwlHiopEcVeaRlKmDZ4IbNQKnM8eX/IQJhLt1QCqe5oS1 p0EckBldl+aCvGxT+o5gEGJlpMpXzfwKQU7BUWRBKEEMxJsUH7aj9hLPycd6Gpy/ XEQLj/6xz+f5g0ROGRZgC1j83TxspU3noxHiE/VR6YKzYstrY9NmsD3RQGjWWZsB 6bV0pflPOwZ5UJdnvNeAVhX5TR9i+hydxLyRHk9S5c9BXrpbSEsUExfnDdie/NKs AyjRaWugGtUB0COeOAjM+jIkLGXtm77aqB4vqaUZXuKmIBsYss8P4BAZeU1x4mZR BDbb6zD2XMm/ItDfcSnV2+pUn4Po/zwosm5+c7/D3prxzll9wkGVKgtEUBDWGqro 1AgsKVW9ca2oltTT9mU7FBqIlJdxOW2jgk1KIdZtCXE61wAPL7kdvIMUfXmVOCbf 2ChsRnwUngg/CCeztodWzZEiC8cSn2bVHbGCEcJf2YLyGNHIHPz+t5Os3N8VNWig 337PVsg5+akgb1l+kCax4Ql27ShXt58biRh51q8zcMqAJLJK+09uRa4C1t4SvkjD QtGU3J1VVlGuaufAT9TrBBjhnXjfSilFJ0EhS792gCC6qZBTBbHWLEFXrty9Nv0H L0nSQv7KTR5F1LPBtDnhsXtyhsC0QgPhhCIxt/kemlAixnm9OgDC7rhnlRGAHU/d 1AWaBa6Y0nb+2qn18HGAHKi5eVQV2O1t13R3GDFj4Yq4NFH3QlPM8jkekEyJh4Cy rVCtTbR3hVtZK8phuqvAXgUTKncWJ9lhtzWCRb75sMGT9sJwUMhuz70b9M2cwNp3 k+1cSDb7mnFqNR2h0ezwDxkou6gzid8ZtcEaF3iSHt/TOBML5Cq/2iqMKlPn+82k N0oMr66t4oCYo8jrvYdgEe198JX/pn/nwD5Q2ksZ0CIK6BpzCLgho2hWjYXIX3PG UAgDY67AGkWpLdpWZDWUbXgpKtx7aA595uAS4e0wjSWS9FIbPkI5mqz8rLavd/WT V4tmz44f5/BT4Mvr49vGHM01qWdgMaJJSCzH8+vcPgZq/HFK6brhWhufB19Go4QF XTnf89AMs5m4M2cFUgog+DOGp+9HSg== =3r3L -----END PGP SIGNATURE-----
