Binary files /tmp/dVHtuYJlBc/chromium-browser-18.0.1025.142~r129054/chromium-browser-18.0.1025.142~r129054-source.tar.lzma and /tmp/YGJKZO1Yi8/chromium-browser-18.0.1025.151~r130497/chromium-browser-18.0.1025.142~r129054-source.tar.lzma differ Binary files /tmp/dVHtuYJlBc/chromium-browser-18.0.1025.142~r129054/chromium-browser-18.0.1025.151~r130497-source.tar.lzma and /tmp/YGJKZO1Yi8/chromium-browser-18.0.1025.151~r130497/chromium-browser-18.0.1025.151~r130497-source.tar.lzma differ diff -Nru chromium-browser-18.0.1025.142~r129054/debian/changelog chromium-browser-18.0.1025.151~r130497/debian/changelog --- chromium-browser-18.0.1025.142~r129054/debian/changelog 2012-04-09 22:02:57.000000000 +0000 +++ chromium-browser-18.0.1025.151~r130497/debian/changelog 2012-04-09 22:03:28.000000000 +0000 @@ -1,3 +1,46 @@ +chromium-browser (18.0.1025.151~r130497-0ubuntu1) precise; urgency=low + + * New upstream release from the Stable Channel (LP: #977502) + - black screen on Hybrid Graphics system with GPU accelerated compositing + enabled (Issue: 117371) + - CSS not applied to element (Issue: 114667) + - Regression rendering a div with background gradient and borders + (Issue: 113726) + - Canvas 2D line drawing bug with GPU acceleration (Issue: 121285) + - Multiple crashes (Issues: 72235, 116825 and 92998) + - Pop-up dialog is at wrong position (Issue: 116045) + - HTML Canvas patterns are broken if you change the transformation matrix + (Issue: 112165) + - SSL interstitial error "proceed anyway" / "back to safety" buttons don't + work (Issue: 119252) + This release fixes the following security issues: + - [106577] Medium CVE-2011-3066: Out-of-bounds read in Skia clipping. + Credit to miaubiz. + - [117583] Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to + Sergey Glazunov. + - [117698] High CVE-2011-3068: Use-after-free in run-in handling. Credit to + miaubiz. + - [117728] High CVE-2011-3069: Use-after-free in line box handling. Credit + to miaubiz. + - [118185] High CVE-2011-3070: Use-after-free in v8 bindings. Credit to + Google Chrome Security Team (SkyLined). + - [118273] High CVE-2011-3071: Use-after-free in HTMLMediaElement. Credit + to pa_kt, reporting through HP TippingPoint ZDI (ZDI-CAN-1528). + - [118467] Low CVE-2011-3072: Cross-origin violation parenting pop-up + window. Credit to Sergey Glazunov. + - [118593] High CVE-2011-3073: Use-after-free in SVG resource handling. + Credit to Arthur Gerkis. + - [119281] Medium CVE-2011-3074: Use-after-free in media handling. Credit + to Sławomir Błażek. + - [119525] High CVE-2011-3075: Use-after-free applying style command. + Credit to miaubiz. + - [120037] High CVE-2011-3076: Use-after-free in focus handling. Credit to + miaubiz. + - [120189] Medium CVE-2011-3077: Read-after-free in script bindings. Credit + to Google Chrome Security Team (Inferno). + + -- Micah Gersten Mon, 09 Apr 2012 16:21:40 -0500 + chromium-browser (18.0.1025.142~r129054-0ubuntu1) precise; urgency=low * New upstream release from the Stable Channel (LP: #968901)