12.0.742.91 -> 12.0.742.112

[Fabien Tassin]

Another security upgrade, needed in oneiric, natty, maverick and lucid

[Launchpad Janitor (janitor)]

This bug was fixed in the package chromium-browser - 12.0.742.112~r90304-0ubuntu1

---------------
chromium-browser (12.0.742.112~r90304-0ubuntu1) oneiric; urgency=high

  * New Minor upstream release from the Stable Channel (LP: #803107)
    This release fixes the following security issues:
    + WebKit issues:
      - [84355] High, CVE-2011-2346: Use-after-free in SVG font handling.
        Credit to miaubiz.
      - [85003] High, CVE-2011-2347: Memory corruption in CSS parsing. Credit
        to miaubiz.
      - [85102] High, CVE-2011-2350: Lifetime and re-entrancy issues in the
        HTML parser. Credit to miaubiz.
      - [85211] High, CVE-2011-2351: Use-after-free with SVG use element.
        Credit to miaubiz.
      - [85418] High, CVE-2011-2349: Use-after-free in text selection. Credit
        to miaubiz.
    + Chromium issues:
      - [77493] Medium, CVE-2011-2345: Out-of-bounds read in NPAPI string
        handling. Credit to Philippe Arteau.
      - [85177] High, CVE-2011-2348: Bad bounds check in v8. Credit to Aki
        Helin of OUSPG.
  Packaging changes:
  * Add Valencian (ca@valencia) to the list of supported langs for the
    lang-packs
    - update debian/rules
    - update debian/control
  * Add support for language variants in Grit, backported from trunk.
    This is needed to support lang-codes like ca@valencia
    - add debian/patches/grit_language_variants.patch
    - update debian/patches/series
  * Add a WANT_ONLY_WHITELISTED_NEW_LANGS knob to make it easier to
    sync translations of new langs between all the branches
    - update debian/rules
  * Properly stop the keep-alive when the build fails
    - update debian/rules
  * Fix the HTML5 <video> tag regression in Oneiric by properly linking
    libvpx so it's not being dropped from libffmpegsumo.so (LP: #795171)
    - add debian/patches/html5-codecs-fix.patch
    - update debian/patches/series
  * Drop the -inspector package, its content has been merged into the main deb
    in M12 and the deb remained empty since.
    Also drop chromium-codecs-ffmpeg-nonfree, renamed in M5 to -extra
    - update debian/control
    - update debian/rules
  * Backport of http://codereview.chromium.org/6883221 from M13 presumably
    fixing the ARM ftbfs from the last update, and set use_cups=0 on armel
    - add debian/patches/cups_cleanup_cr6883221.patch
    - update debian/patches/series
    - update debian/rules
 -- Fabien Tassin <email address hidden> Tue, 28 Jun 2011 07:17:52 +0200

[Micah Gersten (micahg)]

Packages are built in ubuntu-security-proposed, testing in progress

[Micah Gersten (micahg)]

Tested Lucid amd64 and i386 qith QRT, no regression found over previous functionality

[Launchpad Janitor (janitor)]

This bug was fixed in the package chromium-browser - 12.0.742.112~r90304-0ubuntu0.10.04.1

---------------
chromium-browser (12.0.742.112~r90304-0ubuntu0.10.04.1) lucid-security; urgency=low

  [ Fabien Tassin <email address hidden> ]
  * New Minor upstream release from the Stable Channel (LP: #803107)
    This release fixes the following security issues:
    + WebKit issues:
      - [84355] High, CVE-2011-2346: Use-after-free in SVG font handling.
        Credit to miaubiz.
      - [85003] High, CVE-2011-2347: Memory corruption in CSS parsing. Credit
        to miaubiz.
      - [85102] High, CVE-2011-2350: Lifetime and re-entrancy issues in the
        HTML parser. Credit to miaubiz.
      - [85211] High, CVE-2011-2351: Use-after-free with SVG use element.
        Credit to miaubiz.
      - [85418] High, CVE-2011-2349: Use-after-free in text selection. Credit
        to miaubiz.
    + Chromium issues:
      - [77493] Medium, CVE-2011-2345: Out-of-bounds read in NPAPI string
        handling. Credit to Philippe Arteau.
      - [85177] High, CVE-2011-2348: Bad bounds check in v8. Credit to Aki
        Helin of OUSPG.

  [ Micah Gersten <email address hidden> ]
  * Drop armel again from control file to not block on i386/amd64 updates
    - update debian/control
 -- Micah Gersten <email address hidden> Wed, 29 Jun 2011 14:42:28 +0100

[Micah Gersten (micahg)]

Had jdstrand copy maverick and natty to -proposed

Tested maverick on i386 and amd64 with QRT, no regressions found over previous functionality

[Launchpad Janitor (janitor)]

This bug was fixed in the package chromium-browser - 12.0.742.112~r90304-0ubuntu0.10.10.1

---------------
chromium-browser (12.0.742.112~r90304-0ubuntu0.10.10.1) maverick-security; urgency=low

  [ Fabien Tassin <email address hidden> ]
  * New Minor upstream release from the Stable Channel (LP: #803107)
    This release fixes the following security issues:
    + WebKit issues:
      - [84355] High, CVE-2011-2346: Use-after-free in SVG font handling.
        Credit to miaubiz.
      - [85003] High, CVE-2011-2347: Memory corruption in CSS parsing. Credit
        to miaubiz.
      - [85102] High, CVE-2011-2350: Lifetime and re-entrancy issues in the
        HTML parser. Credit to miaubiz.
      - [85211] High, CVE-2011-2351: Use-after-free with SVG use element.
        Credit to miaubiz.
      - [85418] High, CVE-2011-2349: Use-after-free in text selection. Credit
        to miaubiz.
    + Chromium issues:
      - [77493] Medium, CVE-2011-2345: Out-of-bounds read in NPAPI string
        handling. Credit to Philippe Arteau.
      - [85177] High, CVE-2011-2348: Bad bounds check in v8. Credit to Aki
        Helin of OUSPG.

  [ Micah Gersten <email address hidden> ]
  * Drop armel again from control file to not block on i386/amd64 updates
    - update debian/control
 -- Micah Gersten <email address hidden> Thu, 30 Jun 2011 11:14:27 +0100

[Fabien Tassin (fta)]

why didn't you land any of my packaging changes ??? the keep-alive fix was mandatory, the inspector removal and ca@valencia would have been nice to have, and the latter was definitively harmless.

[Micah Gersten (micahg)]

The keep-alive fix is unnecessary on the native builders as I had lamont increase the timeout to 3 hrs for non-arm and 10 hours for arm, I already moved the inspector into the main package on the last upload, no need to remove a package in the stable release. The other change needs to go through -proposed as an SRU.

[Fabien Tassin (fta)]

the keep-alive fix *is* necessary: if for some reason, it fails to compile or link, the keep-alive will remain active, preventing the build to die until killed manually.

[Micah Gersten (micahg)]

I never added the keep-alive script in the stable releases, so there's no issue :)

[Micah Gersten (micahg)]

Tested natty on i386 and amd64 with QRT, no regressions found over previous functionality

[Launchpad Janitor (janitor)]

This bug was fixed in the package chromium-browser - 12.0.742.112~r90304-0ubuntu0.11.04.1

---------------
chromium-browser (12.0.742.112~r90304-0ubuntu0.11.04.1) natty-security; urgency=low

  [ Fabien Tassin <email address hidden> ]
  * New Minor upstream release from the Stable Channel (LP: #803107)
    This release fixes the following security issues:
    + WebKit issues:
      - [84355] High, CVE-2011-2346: Use-after-free in SVG font handling.
        Credit to miaubiz.
      - [85003] High, CVE-2011-2347: Memory corruption in CSS parsing. Credit
        to miaubiz.
      - [85102] High, CVE-2011-2350: Lifetime and re-entrancy issues in the
        HTML parser. Credit to miaubiz.
      - [85211] High, CVE-2011-2351: Use-after-free with SVG use element.
        Credit to miaubiz.
      - [85418] High, CVE-2011-2349: Use-after-free in text selection. Credit
        to miaubiz.
    + Chromium issues:
      - [77493] Medium, CVE-2011-2345: Out-of-bounds read in NPAPI string
        handling. Credit to Philippe Arteau.
      - [85177] High, CVE-2011-2348: Bad bounds check in v8. Credit to Aki
        Helin of OUSPG.
 -- Micah Gersten <email address hidden> Thu, 30 Jun 2011 12:52:08 +0100