This bug was fixed in the package chromium-browser - 6.0.472.53~r57914-0ubuntu1 --------------- chromium-browser (6.0.472.53~r57914-0ubuntu1) maverick; urgency=low * New upstream release from the Stable Channel (LP: #628924) This release fixes the following security issues: - [34414] Low, Pop-up blocker bypass with blank frame target. Credit to Google Chrome Security Team (Inferno) and “ironfist99”. - [37201] Medium, URL bar visual spoofing with homographic sequences. Credit to Chris Weber of Casaba Security. - [41654] Medium, Apply more restrictions on setting clipboard content. Credit to Brook Novak. - [45659] High, Stale pointer with SVG filters. Credit to Tavis Ormandy of the Google Security Team. - [45876] Medium, Possible installed extension enumeration. Credit to Lostmon. - [46750] [51846] Low, Browser NULL crash with WebSockets. Credit to Google Chrome Security Team (SkyLined), Google Chrome Security Team (Justin Schuh) and Keith Campbell. - [50386] High, Use-after-free in Notifications presenter. Credit to Sergey Glazunov. - [50839] High, Notification permissions memory corruption. Credit to Michal Zalewski of the Google Security Team and Google Chrome Security Team (SkyLined). - [51630] [51739] High, Integer errors in WebSockets. Credit to Keith Campbell and Google Chrome Security Team (Cris Neckar). - [51653] High, Memory corruption with counter nodes. Credit to kuzzcc. - [51727] Low, Avoid storing excessive autocomplete entries. Credit to Google Chrome Security Team (Inferno). - [52443] High, Stale pointer in focus handling. Credit to VUPEN Vulnerability Research Team (VUPEN-SR-2010-249). - [52682] High, Sandbox parameter deserialization error. Credit to Ashutosh Mehra and Vineet Batra of the Adobe Reader Sandbox Team. - [53001] Medium, Cross-origin image theft. Credit to Isaac Dawson. * Enable all codecs for HTML5 in Chromium, depending on which ffmpeg sumo lib is installed, the set of usable codecs (at runtime) will still vary. This is now done by setting proprietary_codecs=1 so we can drop our patch - update debian/rules - drop debian/patches/html5_video_mimetypes.patch - update debian/patches/series * Bump the Dependencies on chromium-codecs-ffmpeg to >= 0.6, needed for the new API - update debian/control * Add "libcups2-dev | libcupsys2-dev" (the latter for Hardy) to Build-Depends. This is needed for Cloud Printing - update debian/control * Add libppapi_tests.so and linker.lock to INSTALL_EXCLUDE_FILES and DumpRenderTree_resources/ to INSTALL_EXCLUDE_DIRS - update debian/rules * Install resources.pak in the main deb, and remove all resources/ accordingly - update debian/chromium-browser.install * Add libgnome-keyring-dev to Build-Depends. This is needed for the GNOME Keyring and KWallet integration. See http://crbug.com/12351 - update debian/control * Ship empty policy dirs (for now) in /etc/chromium-browser/policies - update debian/rules - update debian/chromium-browser.dirs * Bump build-deps for gyp to >= 0.1~svn837 - update debian/control * Drop the icedtea6-plugin workaround, it's no longer needed and it may cause troubles when the default xulrunner contains older nss/nspr libs - update debian/chromium-browser.sh.in -- Fabien Tassin