Ubuntu
chromium-browser package

chromium-browser 65.0.3325.146-0ubuntu1 source package in Ubuntu

Changelog

chromium-browser (65.0.3325.146-0ubuntu1) bionic; urgency=medium

  * Upstream release: 65.0.3325.146
    - CVE-2018-6058: Use after free in Flash.
    - CVE-2018-6059: Use after free in Flash.
    - CVE-2018-6060: Use after free in Blink.
    - CVE-2018-6061: Race condition in V8.
    - CVE-2018-6062: Heap buffer overflow in Skia.
    - CVE-2018-6057: Incorrect permissions on shared memory.
    - CVE-2018-6063: Incorrect permissions on shared memory.
    - CVE-2018-6064: Type confusion in V8.
    - CVE-2018-6065: Integer overflow in V8.
    - CVE-2018-6066: Same Origin Bypass via canvas.
    - CVE-2018-6067: Buffer overflow in Skia.
    - CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
    - CVE-2018-6069: Stack buffer overflow in Skia.
    - CVE-2018-6070: CSP bypass through extensions.
    - CVE-2018-6071: Heap bufffer overflow in Skia.
    - CVE-2018-6072: Integer overflow in PDFium.
    - CVE-2018-6073: Heap bufffer overflow in WebGL.
    - CVE-2018-6074: Mark-of-the-Web bypass.
    - CVE-2018-6075: Overly permissive cross origin downloads.
    - CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
    - CVE-2018-6077: Timing attack using SVG filters.
    - CVE-2018-6078: URL Spoof in OmniBox.
    - CVE-2018-6079: Information disclosure via texture data in WebGL.
    - CVE-2018-6080: Information disclosure in IPC call.
    - CVE-2018-6081: XSS in interstitials.
    - CVE-2018-6082: Circumvention of port blocking.
    - CVE-2018-6083: Incorrect processing of AppManifests.
  * debian/rules: remove use_gconf build flag
  * debian/patches/3-chrome-xid.patch: removed, unused
  * debian/patches/5-desktop-integration-settings.patch: removed, unused
  * debian/patches/6-passwordless-install-support.patch: removed, unused
  * debian/patches/7-npapi-permission-not-defaults-to-unauthorized.patch:
    removed, unused
  * debian/patches/additional-search-engines.patch: refreshed
  * debian/patches/breakpad: removed, unused
  * debian/patches/cups-include-deprecated-ppd: removed, unused
  * debian/patches/define__libc_malloc.patch: refreshed
  * debian/patches/disable-sse2: updated
  * debian/patches/display-scaling-default-value: removed, unused
  * debian/patches/do-not-use-bundled-clang: removed, unused
  * debian/patches/enable-chromecast-by-default.patch: refreshed
  * debian/patches/enable_vaapi_on_linux.diff: removed, unused
  * debian/patches/flash-redirection: removed, unused
  * debian/patches/format-flag.patch: removed, unused
  * debian/patches/gpu_default_disabled: removed, unused
  * debian/patches/gsettings-display-scaling: removed, unused
  * debian/patches/ld-memory-32bit.patch: removed, unused
  * debian/patches/linker-asneeded-bug.patch: removed, unused
  * debian/patches/lp-translations-paths: removed, unused
  * debian/patches/mir-ozone-module: removed, unused
  * debian/patches/mir-support: removed, unused
  * debian/patches/revert-Xclang-instcombine-lower-dbg-declare.patch: refreshed
  * debian/patches/search-credit.patch: refreshed
  * debian/patches/set-rpath-on-chromium-executables.patch: refreshed
  * debian/patches/suppress-newer-clang-warning-flags.patch: refreshed
  * debian/patches/title-bar-default-system.patch-v35: refreshed
  * debian/patches/wayland-ozone: removed, unused
  * debian/patches/xdg-settings-multiexec-desktopfiles.patch: removed, unused
  * debian/known_gn_gen_args-*: remove use_gconf build flag

 -- Olivier Tilloy <email address hidden>  Wed, 07 Mar 2018 11:40:01 +0100

Upload details

Uploaded by:
Olivier Tilloy
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
i386 amd64 armhf arm64 all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
chromium-browser_65.0.3325.146.orig.tar.xz 543.9 MiB cb4f2f3f5a3344f7c452b61f8086d4b4e56af6f5bc34309c3ede8be6b4ab81a3
chromium-browser_65.0.3325.146-0ubuntu1.debian.tar.xz 2.2 MiB 24dcbd9b30ef2c06b610de06fa7eba28e5adce3a66c4c7489acb031e12e02bd3
chromium-browser_65.0.3325.146-0ubuntu1.dsc 2.5 KiB daf812edfe0b673132a2059fff0e20723ba84a4056a0df4d749ad966f805e4a5

Available diffs

  • diff from 64.0.3282.167-0ubuntu1 to 65.0.3325.146-0ubuntu1 (pending)

View changes file

Binary packages built by this source

chromium-browser: Chromium web browser, open-source version of Chrome

 An open-source browser project that aims to build a safer, faster, and more
 stable way for all Internet users to experience the web.

chromium-browser-dbgsym: debug symbols for chromium-browser
chromium-browser-l10n: chromium-browser language packages

 An open-source browser project that aims to build a safer, faster, and more
 stable way for all Internet users to experience the web.
 .
 This package contains language packages for 65 languages:
 am, ar, ast, bg, bn, bs, ca, ca@valencia, cs, da, de, el, en-AU, en-GB, eo,
 es-419, es, et, eu, fa, fil, fi, fr, gl, gu, he, hi, hr, hu, hy, ia, id, it,
 ja, ka, kn, ko, ku, kw, lt, lv, ml, mr, ms, nb, nl, pl, pt-BR, pt-PT, ro, ru,
 sk, sl, sr, sv, sw, ta, te, th, tr, ug, uk, vi, zh-CN, zh-TW

chromium-chromedriver: WebDriver driver for the Chromium Browser

 Chromedriver serves as a bridge between Chromium Browser and Selenium
 WebDriver.
 .
 See https://sites.google.com/a/chromium.org/chromedriver/ for details.

chromium-chromedriver-dbgsym: debug symbols for chromium-chromedriver
chromium-codecs-ffmpeg: Free ffmpeg codecs for the Chromium Browser

 An open-source browser project that aims to build a safer, faster, and more
 stable way for all Internet users to experience the web.
 .
 This package contains the multi-threaded ffmpeg codecs needed for the HTML5
 <audio> and <video> tags. Only the free ogg, vorbis and theora codecs are
 included. See chromium-codecs-ffmpeg-extra for additional codecs

chromium-codecs-ffmpeg-dbgsym: debug symbols for chromium-codecs-ffmpeg
chromium-codecs-ffmpeg-extra: Extra ffmpeg codecs for the Chromium Browser

 An open-source browser project that aims to build a safer, faster, and more
 stable way for all Internet users to experience the web.
 .
 This package contains the multi-threaded ffmpeg codecs needed for the HTML5
 <audio> and <video> tags. In addition to the patent-free ogg, vorbis and
 theora codecs, aac/ac3/mpeg4audio/h264/mov/mp3 are also included. See
 chromium-codecs-ffmpeg if you prefer only the patent-free codecs

chromium-codecs-ffmpeg-extra-dbgsym: debug symbols for chromium-codecs-ffmpeg-extra