Update Chromium to take advantage of important security updates

[Dan Auerbach]

The current Chromium package shipped with Ubuntu (Chromium 12) is badly out of date. This is particularly problematic because using old versions of browsers are missing critical security features. To pick one out, newer versions of Chromium ship with certificate pinning, which can be used to mitigate ongoing issues that keep arising with the present CA system underlying current PKI. See http://blog.chromium.org/2011/06/new-chromium-security-features-june.html, grep for "certificate pinning". Indeed, the presence of this feature is critical for stopping MITM attacks based on compromised CA certificates. The most recent example occurred with the CA DigiNotar: see, e.g., http://googleonlinesecurity.blogspot.com/2011/08/update-on-attempted-man-in-middle.html. Note that the sentence in that blog post about Chrome users being safe from the attack is only true of Chrome, not the version of Chromium currently shipped with Ubuntu. I think it's important to keep this browser software up to date for the safety of users, even if there are no explicit "security update". I have marked this as a vulnerability since it relates to security and I wasn't sure how narrowly the security list should be used, though as it is not a traditional vulnerability bug, of course feel free to recategorize it as an ordinary (but important! :)) bug.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 12.0.742.112~r90304-0ubuntu0.10.04.1
ProcVersionSignature: Ubuntu 2.6.32-33.72-generic 2.6.32.41+drm33.18
Uname: Linux 2.6.32-33-generic x86_64
NonfreeKernelModules: fglrx
Architecture: amd64
ChromiumPrefs:
 browser/check_default_browser = **unset** (no such key yet)
 extensions/settings =
  (no entry found in the Preferences file)
Date: Sun Sep 11 14:46:42 2011
Desktop-Session:
 DESKTOP_SESSION = gnome
 GNOME_DESKTOP_SESSION_ID = this-is-deprecated
 XDG_CONFIG_DIRS = /etc/xdg/xdg-gnome:/etc/xdg
 XDG_DATA_DIRS = /usr/share/gnome:/usr/local/share/:/usr/share/
DetectedPlugins: (no entry found in the Preferences file)
Env:
 MOZ_PLUGIN_PATH = None
 LD_LIBRARY_PATH = None
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
ProcEnviron:
 LANG=en_US.utf8
 SHELL=/bin/bash
SourcePackage: chromium-browser
chromium-default: CHROMIUM_FLAGS=""

[Jamie Strandboge (jdstrand)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 834922, so it is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Please continue to report any other bugs you may find.