Format: 1.8
Date: Thu, 05 Sep 2013 16:47:55 -0400
Source: chromium-browser
Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-codecs-ffmpeg chromium-codecs-ffmpeg-dbg chromium-codecs-ffmpeg-extra chromium-codecs-ffmpeg-extra-dbg
Architecture: source
Version: 29.0.1547.65-0ubuntu0.12.04.1
Distribution: precise-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: Chad MILLER <chad.miller@canonical.com>
Description: 
 chromium-browser - Chromium browser
 chromium-browser-dbg - chromium-browser debug symbols
 chromium-browser-l10n - chromium-browser language packages
 chromium-codecs-ffmpeg - Free ffmpeg codecs for the Chromium Browser
 chromium-codecs-ffmpeg-dbg - chromium-codecs-ffmpeg debug symbols
 chromium-codecs-ffmpeg-extra - Extra ffmpeg codecs for the Chromium Browser
 chromium-codecs-ffmpeg-extra-dbg - chromium-codecs-ffmpeg-extra debug symbols
Launchpad-Bugs-Fixed: 1215361
Changes: 
 chromium-browser (29.0.1547.65-0ubuntu0.12.04.1) precise-security; urgency=low
 .
   * New release 29.0.1547.65.
   * New release 29.0.1547.62.
   * New release 29.0.1547.57:  (LP: #1215361)
     - CVE-2013-2900: Incomplete path sanitization in file handling.
     - CVE-2013-2905: Information leak via overly broad permissions on shared
       memory files.
     - CVE-2013-2901: Integer overflow in ANGLE.
     - CVE-2013-2902: Use after free in XSLT.
     - CVE-2013-2903: Use after free in media element.
     - CVE-2013-2904: Use after free in document parsing.
     - CVE-2013-2887: Various fixes from internal audits, fuzzing and other
       initiatives (Chrome 29).
   * debian/patches/duckduckgo.patch: Include DuckDuckGo in search-engine
     list.  [Caine Tighe <~caine>]
   * debian/patches/search-credit.patch:  Update URLs.
   * debian/patches/disable_dlog_and_dcheck_in_release_builds.patch,
     debian/patches/wehkit_rev_parser.patch,
       No longer necessary.  Deleted.
   * debian/chromium-browser.sh.in: Include command-line parameters for
     registered plugins.
   * Since we include remoting locales too, also split its locales info
     into the -l10n package correctly.
   * debian/rules: Disable arm_neon_optional. Impossible with sandbox, AND
     breaks build right now.
   * debian/rules: Fix packaging-completeness checker.
   * debian/rules: Break long expressions into discrete parts in packaging
     completeness checker.
   * debian/rules:
     - Make unused-file matches simpler, and install rule more descriptive.
     - get-orig-source has to make the directory for the orig contents.
   * debian/source/lintian-overrides:
     - Add old-fsf-address-in-copyright-file and image-file-in-usr-lib
     - Fix setuid-binary to be "source". Seems like it should be "binary". :(
   * debian/checkout-orig-source.mk: Remove tests and add unofficialness
     marker file to orig tarball when we can't use upstream orig releases.
   * debian/chromium-browser.dirs: Add reference to /usr/share/chromium-browser,
     expmplary for extension placement.
   * debian/patches/extensions-directory.patch: Use a /usr/share/ directory that
     is named with our package, not "chromium". Withouth this, we force global
     extensions to violate FHS.
 .
 chromium-browser (28.0.1500.95-0ubuntu0.12.04.2) precise-security; urgency=low
 .
   * debian/control: Set VCS URL to be accurate.
   * New release 28.0.1500.95:
     - CVE-2013-2881: Origin bypass in frame handling.
     - CVE-2013-2882: Type confusion in V8.
     - CVE-2013-2883: Use-after-free in MutationObserver.
     - CVE-2013-2884: Use-after-free in DOM.
     - CVE-2013-2885: Use-after-free in input handling.
     - CVE-2013-2886: Various fixes from internal audits, fuzzing and other
       initiatives.
   * debian/rules:
     - Keepalive in tests rule, to keep builder machines from reaping.
     - Further exclude a few tests that interact with fakeroot,
       ReadOnlyFileUtilTest.
   * debian/rules:
     - Disable logging calls in chromium binary to save several MB of executable
       size.
   * debian/patches/linker-asneeded-bug.patch:
     - Add patch to work around linker bug.
   * debian/keep-alive.sh:
     - Treat disappearing /proc as error, and quit.
Checksums-Sha1: 
 e74d472b2174b6c583d76be61d8993846968e084 2924 chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.dsc
 152cbf6b79fb21f0b60638fe402ae674ed0102e8 253495 chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.debian.tar.gz
Checksums-Sha256: 
 d85a60b81a4e54c024d68b4d275c40819cb19b9d0fb1e8c68ec7cc3a0d84c125 2924 chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.dsc
 1397269807765402256c666b7b24e45f64c090db20c18aa44e2bff71155b0cfd 253495 chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.debian.tar.gz
Files: 
 041e8301cde90cb6f1db5eda93d120a9 2924 web optional chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.dsc
 b3dd79c175494bc15fc289ba4b153e10 253495 web optional chromium-browser_29.0.1547.65-0ubuntu0.12.04.1.debian.tar.gz
Original-Maintainer: Micah Gersten <micahg@ubuntu.com>, Fabien Tassin <fta@ubuntu.com>