Format: 1.8 Date: Wed, 24 Jan 2018 23:18:03 +0100 Source: chromium-browser Binary: chromium-browser chromium-browser-l10n chromium-codecs-ffmpeg chromium-codecs-ffmpeg-extra chromium-chromedriver Architecture: armhf Version: 64.0.3282.119-0ubuntu1 Distribution: bionic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Olivier Tilloy Description: chromium-browser - Chromium web browser, open-source version of Chrome chromium-browser-l10n - chromium-browser language packages chromium-chromedriver - WebDriver driver for the Chromium Browser chromium-codecs-ffmpeg - Free ffmpeg codecs for the Chromium Browser chromium-codecs-ffmpeg-extra - Extra ffmpeg codecs for the Chromium Browser Launchpad-Bugs-Fixed: 1738149 1742653 Changes: chromium-browser (64.0.3282.119-0ubuntu1) bionic; urgency=medium . * Upstream release: 64.0.3282.119 - CVE-2018-6031: Use after free in PDFium. - CVE-2018-6032: Same origin bypass in Shared Worker. - CVE-2018-6033: Race when opening downloaded files. - CVE-2018-6034: Integer overflow in Blink. - CVE-2018-6035: Insufficient isolation of devtools from extensions. - CVE-2018-6036: Integer underflow in WebAssembly. - CVE-2018-6037: Insufficient user gesture requirements in autofill. - CVE-2018-6038: Heap buffer overflow in WebGL. - CVE-2018-6039: XSS in DevTools. - CVE-2018-6040: Content security policy bypass. - CVE-2018-6041: URL spoof in Navigation. - CVE-2018-6042: URL spoof in OmniBox. - CVE-2018-6043: Insufficient escaping with external URL handlers. - CVE-2018-6045: Insufficient isolation of devtools from extensions. - CVE-2018-6046: Insufficient isolation of devtools from extensions. - CVE-2018-6047: Cross origin URL leak in WebGL. - CVE-2018-6048: Referrer policy bypass in Blink. - CVE-2017-15420: URL spoofing in Omnibox. - CVE-2018-6049: UI spoof in Permissions. - CVE-2018-6050: URL spoof in OmniBox. - CVE-2018-6051: Referrer leak in XSS Auditor. - CVE-2018-6052: Incomplete no-referrer policy implementation. - CVE-2018-6053: Leak of page thumbnails in New Tab Page. - CVE-2018-6054: Use after free in WebUI. * debian/control: update reference URL for chromedriver * debian/rules: - remove enable_hotwording build flag - exclude build artifacts from the binary package (LP: #1742653) * debian/patches/add-missing-cstddef-include.patch: added * debian/patches/configuration-directory.patch: refreshed * debian/patches/disable-sse2: refreshed * debian/patches/enable-chromecast-by-default.patch: refreshed * debian/patches/fix-ffmpeg-ia32-build.patch: added * debian/patches/last-commit-position: refreshed * debian/patches/no-xlocale-header.patch: removed, no longer needed * debian/patches/revert-clang-nostdlib++.patch: updated * debian/patches/revert-Xclang-instcombine-lower-dbg-declare.patch: refreshed * debian/patches/search-credit.patch: refreshed * debian/patches/set-rpath-on-chromium-executables.patch: refreshed * debian/patches/suppress-newer-clang-warning-flags.patch: updated * debian/patches/title-bar-default-system.patch-v35: refreshed * debian/patches/touch-v35: refreshed * debian/patches/widevine-other-locations: updated (LP: #1738149) * debian/known_gn_gen_args-*: remove enable_hotwording build flag Checksums-Sha1: b92a17d2cc3866e01492756a0ac31c6989855a8d 100022184 chromium-browser-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 81d05db7ef27f071b4f66450ac59a5dd62124850 18546 chromium-browser_64.0.3282.119-0ubuntu1_armhf.buildinfo c5d8681b5363834046245b11d6536b50ee10aadb 44317028 chromium-browser_64.0.3282.119-0ubuntu1_armhf.deb a19d2a07263d0cdc15c1f964996e7506882d42cc 6446712 chromium-chromedriver-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb dcb6387d155db5ec40cdca9628f2a40d244384cc 2933320 chromium-chromedriver_64.0.3282.119-0ubuntu1_armhf.deb f4bc7637beda6646313961865fdf1abfff3d1dc7 419592 chromium-codecs-ffmpeg-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 12492b91b11b3d71bb3abb2ab6dddc01e5a7cf84 697628 chromium-codecs-ffmpeg-extra-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb eecfef53c418fd585ed62d28d28bd73e995b6a60 900024 chromium-codecs-ffmpeg-extra_64.0.3282.119-0ubuntu1_armhf.deb 9a3436b516e5f95400a242a58e6dd41946ba288f 640356 chromium-codecs-ffmpeg_64.0.3282.119-0ubuntu1_armhf.deb Checksums-Sha256: a7a9878828b75793c34eb5a22d2e5916e7ae2c599dc1b678dfbe8b647b4423aa 100022184 chromium-browser-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 5ab4a31becb755cb741d8026eeedea556d8422db4cea33745fbd2542fbc9ef6a 18546 chromium-browser_64.0.3282.119-0ubuntu1_armhf.buildinfo e4978e255d482c3db5ea81419d5a402e94c7705891f68725916fc8a2fee55c06 44317028 chromium-browser_64.0.3282.119-0ubuntu1_armhf.deb caeb8d00e51d4b1f30e017d604a51d2f4ec1fe1ae47dafabf9f4f0b2c17ba76f 6446712 chromium-chromedriver-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb defdbdc69ce1eab707f5b94281d004646268d1ab2d4e40e79775232a9cc19986 2933320 chromium-chromedriver_64.0.3282.119-0ubuntu1_armhf.deb e1a303cb8c4d6b590d5e5905a8e351db8938b9fe93d0c59deee0aee9fdbb8694 419592 chromium-codecs-ffmpeg-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 48cb32b58eb9b9a8f7ec7b1c11678440a7b061ae2f1d30ac0f4e0becd2543a37 697628 chromium-codecs-ffmpeg-extra-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb a721a22ffdc5d95b65b69e9d55a53ba03eaa18fc5c99c45e95e47101ee046aa1 900024 chromium-codecs-ffmpeg-extra_64.0.3282.119-0ubuntu1_armhf.deb 1ac464e8de038a4907665809be21dfd371921b875e37535e782b86cb8a10264c 640356 chromium-codecs-ffmpeg_64.0.3282.119-0ubuntu1_armhf.deb Files: 052154df48c705b95b067706c5395299 100022184 debug optional chromium-browser-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 0adcbbee8447887103c69f51905fe758 18546 web optional chromium-browser_64.0.3282.119-0ubuntu1_armhf.buildinfo e1f716432dbe255f3e4ff2f75bac3a38 44317028 web optional chromium-browser_64.0.3282.119-0ubuntu1_armhf.deb a664f1137a980d2e7ae08ad1e053dd40 6446712 debug optional chromium-chromedriver-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb cf7e3ec60855fc9cfc59dbcaa51ae043 2933320 web optional chromium-chromedriver_64.0.3282.119-0ubuntu1_armhf.deb 9de76a5ef0a720cc60b58fe1882f1b3f 419592 debug optional chromium-codecs-ffmpeg-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb dd52928b26344a8e127dacabee349a37 697628 debug optional chromium-codecs-ffmpeg-extra-dbgsym_64.0.3282.119-0ubuntu1_armhf.ddeb 06301d27b3a41644841941001e268830 900024 web optional chromium-codecs-ffmpeg-extra_64.0.3282.119-0ubuntu1_armhf.deb 5ee178871c3de8dcbf3936a426d2a4cb 640356 web optional chromium-codecs-ffmpeg_64.0.3282.119-0ubuntu1_armhf.deb