Format: 1.8 Date: Mon, 09 Apr 2012 19:10:03 -0500 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-browser-inspector chromium-codecs-ffmpeg chromium-codecs-ffmpeg-dbg chromium-codecs-ffmpeg-extra chromium-codecs-ffmpeg-extra-dbg chromium-codecs-ffmpeg-nonfree chromium-codecs-ffmpeg-nonfree-dbg Architecture: amd64 amd64_translations Version: 18.0.1025.151~r130497-0ubuntu0.10.04.1 Distribution: lucid Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Micah Gersten Description: chromium-browser - Chromium browser chromium-browser-dbg - chromium-browser debug symbols chromium-browser-inspector - page inspector for the chromium-browser - transitional package chromium-browser-l10n - chromium-browser language packages chromium-codecs-ffmpeg - Free ffmpeg codecs for the Chromium Browser chromium-codecs-ffmpeg-dbg - chromium-codecs-ffmpeg debug symbols chromium-codecs-ffmpeg-extra - Extra ffmpeg codecs for the Chromium Browser chromium-codecs-ffmpeg-extra-dbg - chromium-codecs-ffmpeg-extra debug symbols chromium-codecs-ffmpeg-nonfree - dummy upgrade package chromium-codecs-ffmpeg-nonfree-dbg - dummy upgrade package Launchpad-Bugs-Fixed: 977502 Changes: chromium-browser (18.0.1025.151~r130497-0ubuntu0.10.04.1) lucid-security; urgency=low . * New upstream release from the Stable Channel (LP: #977502) - black screen on Hybrid Graphics system with GPU accelerated compositing enabled (Issue: 117371) - CSS not applied to element (Issue: 114667) - Regression rendering a div with background gradient and borders (Issue: 113726) - Canvas 2D line drawing bug with GPU acceleration (Issue: 121285) - Multiple crashes (Issues: 72235, 116825 and 92998) - Pop-up dialog is at wrong position (Issue: 116045) - HTML Canvas patterns are broken if you change the transformation matrix (Issue: 112165) - SSL interstitial error "proceed anyway" / "back to safety" buttons don't work (Issue: 119252) This release fixes the following security issues: - [106577] Medium CVE-2011-3066: Out-of-bounds read in Skia clipping. Credit to miaubiz. - [117583] Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to Sergey Glazunov. - [117698] High CVE-2011-3068: Use-after-free in run-in handling. Credit to miaubiz. - [117728] High CVE-2011-3069: Use-after-free in line box handling. Credit to miaubiz. - [118185] High CVE-2011-3070: Use-after-free in v8 bindings. Credit to Google Chrome Security Team (SkyLined). - [118273] High CVE-2011-3071: Use-after-free in HTMLMediaElement. Credit to pa_kt, reporting through HP TippingPoint ZDI (ZDI-CAN-1528). - [118467] Low CVE-2011-3072: Cross-origin violation parenting pop-up window. Credit to Sergey Glazunov. - [118593] High CVE-2011-3073: Use-after-free in SVG resource handling. Credit to Arthur Gerkis. - [119281] Medium CVE-2011-3074: Use-after-free in media handling. Credit to Sławomir Błażek. - [119525] High CVE-2011-3075: Use-after-free applying style command. Credit to miaubiz. - [120037] High CVE-2011-3076: Use-after-free in focus handling. Credit to miaubiz. - [120189] Medium CVE-2011-3077: Read-after-free in script bindings. Credit to Google Chrome Security Team (Inferno). Checksums-Sha1: 39460accdbc0f1f6eae35e2bfa767d1cf7f8c1d9 20818006 chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 6cd9d9bc619047797226b491430e7d2ac7c5721c 260437 chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64_translations.tar.gz 1b6760d45d10916df9a20514a63a7558e218b7c4 193475542 chromium-browser-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb c871ca70c10d6c9bdeffd46a64fa65a71672fbb9 414028 chromium-codecs-ffmpeg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 1f19c53e1f379d768df0f2fe995c44b190bded98 641566 chromium-codecs-ffmpeg-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb c4cac31ef0ac9c087ac0a7728694455f589d025f 667548 chromium-codecs-ffmpeg-extra_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb b1e3a26cf61d3a6cfb220ac6b5c40d5abd2f2676 1022308 chromium-codecs-ffmpeg-extra-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb Checksums-Sha256: f8c7d5193d227c53743b44e7ef3367c1a0c9507a801f9c02f9f95cf4171503f7 20818006 chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 9ddbaf9a6cd9c8343d2f227ceac85c96963b013a0b88650b515a04bfb94704a2 260437 chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64_translations.tar.gz 0bd6d708d778a3b3aa5ca448287644e7f53fef6dc69fcab75f4b44303e92f9f5 193475542 chromium-browser-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb fbd4b34ae75797a5f42b3182d8f0c95df582d8053d1ae1c644c2cd8a56359f05 414028 chromium-codecs-ffmpeg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb f6c5d2d555e31773256f60e4d3da1bb6fcb8e0e36fc9b6fa7d785d93ffb20f40 641566 chromium-codecs-ffmpeg-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb f36074e3ae34ceafe8c9133b7373fa23720894997c28f7717dfc9fc88d7201e3 667548 chromium-codecs-ffmpeg-extra_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb a04067ff7a6c693439da46b0aae19feac8018cf1d8b5f5282202be8c5e08192a 1022308 chromium-codecs-ffmpeg-extra-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb Files: eeadf629cce8e55d3707426af8e0c331 20818006 web optional chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 6010362b4b878b15a317b5123333d138 260437 raw-translations - chromium-browser_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64_translations.tar.gz 8950dec98bd351383fbe35062a5762ed 193475542 devel optional chromium-browser-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 1fa1f860047cf5583c5976f7186e1b2a 414028 web optional chromium-codecs-ffmpeg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 30f69ff418a294584288f940390bbe72 641566 debug extra chromium-codecs-ffmpeg-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb dab7dffa9366b98125860f74b8561775 667548 web optional chromium-codecs-ffmpeg-extra_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb 3ce81eec7fef3b67da7b30a085c3ea01 1022308 debug extra chromium-codecs-ffmpeg-extra-dbg_18.0.1025.151~r130497-0ubuntu0.10.04.1_amd64.deb