Format: 1.8 Date: Fri, 13 May 2016 10:52:23 -0400 Source: chromium-browser Binary: chromium-browser chromium-browser-dbg chromium-browser-l10n chromium-codecs-ffmpeg chromium-codecs-ffmpeg-dbg chromium-codecs-ffmpeg-extra chromium-codecs-ffmpeg-extra-dbg chromium-chromedriver chromium-chromedriver-dbg Architecture: i386 Version: 50.0.2661.102-0ubuntu0.16.04.1.1237 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Chad MILLER Description: chromium-browser - Chromium web browser, open-source version of Chrome chromium-browser-dbg - chromium-browser debug symbols chromium-browser-l10n - chromium-browser language packages chromium-chromedriver - WebDriver driver for the Chromium Browser chromium-chromedriver-dbg - chromium-chromedriver debug symbols chromium-codecs-ffmpeg - Free ffmpeg codecs for the Chromium Browser chromium-codecs-ffmpeg-dbg - chromium-codecs-ffmpeg debug symbols chromium-codecs-ffmpeg-extra - Extra ffmpeg codecs for the Chromium Browser chromium-codecs-ffmpeg-extra-dbg - chromium-codecs-ffmpeg-extra debug symbols Changes: chromium-browser (50.0.2661.102-0ubuntu0.16.04.1.1237) xenial-security; urgency=medium . * Upstream release 50.0.2661.102: - CVE-2016-1667: Same origin bypass in DOM. - CVE-2016-1668: Same origin bypass in Blink V8 bindings. - CVE-2016-1669: Buffer overflow in V8. - CVE-2016-1670: Race condition in loader. - CVE-2016-1671: Directory traversal using the file scheme on Android. * Upstream release 50.0.2661.94: - CVE-2016-1660: Out-of-bounds write in Blink. - CVE-2016-1661: Memory corruption in cross-process frames. - CVE-2016-1662: Use-after-free in extensions. - CVE-2016-1663: Use-after-free in Blink’s V8 bindings. - CVE-2016-1664: Address bar spoofing. - CVE-2016-1665: Information leak in V8. - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives. * Upstream release 50.0.2661.75: - CVE-2016-1652: Universal XSS in extension bindings. - CVE-2016-1653: Out-of-bounds write in V8. - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding. - CVE-2016-1654: Uninitialized memory read in media. - CVE-2016-1655: Use-after-free related to extensions. - CVE-2016-1656: Android downloaded file path restriction bypass. - CVE-2016-1657: Address bar spoofing. - CVE-2016-1658: Potential leak of sensitive information to malicious extensions. - CVE-2015-1659: Various fixes from internal audits, fuzzing and other initiatives. * debian/patches/seccomp-allow-set-robust-list: pass through syscall set_robust_list. glibc nptl thread creation uses it. * debian/rules: use new libsecret way of contacting keyring. * debian/patches/blink-platform-export-class: avoid Trusty bug where WebKit Platform class vtable not found at link time. * debian/apport/chromium-browser.py: Handle case when crash and no chromium directory exists. Still report errors in apport. Checksums-Sha1: 9ab989c7beb67cbb7a02d3029241bb13b3614b53 724441742 chromium-browser-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb bdff9caea2614605c3f831b8e78e4e36f15bdc26 856 chromium-browser-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 95dae7bd2e9ee7d8d82de4d6347c952d1b03e7f3 80112856 chromium-browser_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb abb58be487f01404139462d2f59535560d90c58e 2765852 chromium-chromedriver-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb b27af140f162e4a4ccb53bf07eed326926b4aa7e 856 chromium-chromedriver-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb e71b9fa9fd9e0234c55bf931d8bca482e556d8bb 400488 chromium-chromedriver_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb b2cc4e0a11d813302e4a8fcb2e27f5408ef61d28 876496 chromium-codecs-ffmpeg-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 49e2939ded4b750f3ea65822660e5d5344049818 978 chromium-codecs-ffmpeg-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 7b5974ed8dd12a614cea7d4d17ac866bf3e9028b 1645352 chromium-codecs-ffmpeg-extra-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb b1dc101ec4d8f9bcf37bc7124549362bbcb7fbb7 1022 chromium-codecs-ffmpeg-extra-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 4f3a34bc349a77861e301dd9c5df4a38b2bf8634 936680 chromium-codecs-ffmpeg-extra_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb c48e229f7198c331fc50aad11ec19c36732395d2 571644 chromium-codecs-ffmpeg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb Checksums-Sha256: feba1cbccd027729dd4a1505510f9aac215150877e9f89fe2689f4056b6fcf01 724441742 chromium-browser-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb f8554411eef092a5a257376ff43e93163b4473953ab605bc5297f210d3547a00 856 chromium-browser-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 2aa1f73ceee710d76cb8083ba8f044f5233b961be48b32776cd9d2167b7eae94 80112856 chromium-browser_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb da3dde5b16be28fe29334b7ab8b7b07df9884d07a0c14f1625003f07eda30000 2765852 chromium-chromedriver-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 4b43293a36fe745bb8afa525fcf0c471c055b2430159da04c1893dd4c754e380 856 chromium-chromedriver-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 27a05f475648299a21b0551fd365409e16127889438737c6567823a764e53349 400488 chromium-chromedriver_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb e3a16155d2ea24694e0ea12f770f0ad7428447490f2c0bb1b6664cdb0b2efd85 876496 chromium-codecs-ffmpeg-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 71327e6087fb690794f25daa6613d86b9cc2a40f7995268fa605b6633f1f6c48 978 chromium-codecs-ffmpeg-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 5b8dbbce12ba39694e2477bbe54798f7da5efa2d523c78a3b38268cc1ee405ab 1645352 chromium-codecs-ffmpeg-extra-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb af4c9233923d2819d388375c63375987e7fa8b71cbfef4b8d2ba10d365238dcc 1022 chromium-codecs-ffmpeg-extra-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb d60d066bbe45ffa14ac1062990ef722cd5f60a65732a3ac83b04cd7541b6d1c6 936680 chromium-codecs-ffmpeg-extra_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 7bba547c84e064282a78b38bc6ff0c8f74ef195fb84ff6f6a087d9f5fdf69240 571644 chromium-codecs-ffmpeg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb Files: 7246eaaad3a26762b07f04d19ebe2c53 724441742 debug extra chromium-browser-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb ce36823397833f93f9b6ef1dc15e01db 856 web extra chromium-browser-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 2eb4a76a2acf7d2328e9159f1dbd24c3 80112856 web optional chromium-browser_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 664916a91b06a2923afc729afe5ba5a8 2765852 debug extra chromium-chromedriver-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 5a93bbb8cb023ab10d0ca203d0e39ff1 856 web extra chromium-chromedriver-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb 3ae6346b2692599673f72006ab67867b 400488 web optional chromium-chromedriver_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 2bc7e8a0d12503951fd7d6b390648ec7 876496 debug extra chromium-codecs-ffmpeg-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 6f521b0048519fb5c066b6bd20c1b737 978 web extra chromium-codecs-ffmpeg-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb b8dd8a0d8a427fc5a78e25ded31754f0 1645352 debug extra chromium-codecs-ffmpeg-extra-dbg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 0d32b9af4d244621d70497004c95dab5 1022 web extra chromium-codecs-ffmpeg-extra-dbgsym_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.ddeb e2f2abfa825b34edfa31a24cfe62f767 936680 web optional chromium-codecs-ffmpeg-extra_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb 2054677c698a7264f1055f3f17402ac2 571644 web optional chromium-codecs-ffmpeg_50.0.2661.102-0ubuntu0.16.04.1.1237_i386.deb