Accepted chromium 76.0.3809.87-1 (source) into unstable

Michael Gilbert Tue, 30 Jul 2019 21:56:05 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 29 Jul 2019 23:22:44 +0000
Source: chromium
Architecture: source
Version: 76.0.3809.87-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Team <chrom...@packages.debian.org>
Changed-By: Michael Gilbert <mgilb...@debian.org>
Closes: 932049
Changes:
 chromium (76.0.3809.87-1) unstable; urgency=medium
 .
   * New upstream stable release.
     - CVE-2019-5847: V8 sealed/frozen elements cause crash. Reported by m3plex
     - CVE-2019-5848: Font sizes may expose sensitive information. Reported by
       Mark Amery
     - CVE-2019-5850: Use-after-free in offline page fetcher. Reported by
       Brendon Tiszka
     - CVE-2019-5851: Use-after-poison in offline audio context. Reported by Zhe
       Jin
     - CVE-2019-5852: Object leak of utility functions. Reported by David Erceg
     - CVE-2019-5853: Memory corruption in regexp length check. Reported by
       yngwei and sakura
     - CVE-2019-5854: Integer overflow in PDFium text rendering. Reported by
       Zhen Zhou
     - CVE-2019-5855: Integer overflow in PDFium. Reported by Zhen Zhou
     - CVE-2019-5856: Insufficient checks on filesystem: URI permissions.
       Reported by Yongke Wang
     - CVE-2019-5857: Comparison of -0 and null yields crash. Reported by
       cloudfuzzer
     - CVE-2019-5858: Insufficient filtering of Open URL service parameters.
       Reported by evi1m0
     - CVE-2019-5859: res: URIs can load alternative browsers. Reported by James
       Lee
     - CVE-2019-5860: Use-after-free in PDFium. Reported by Anonymous
     - CVE-2019-5861: Click location incorrectly checked. Reported by Robin 
Linus
     - CVE-2019-5862: AppCache not robust to compromised renderers. Reported by
       Jun Kokatsu
     - CVE-2019-5864: Insufficient port filtering in CORS for extensions.
       Reported by Devin Grindle
     - CVE-2019-5865: Site isolation bypass from compromised renderer. Reported
       by Ivan Fratric
   * Use legacy call to avoid error in icu 6.3 (closes: #932049).
Checksums-Sha1:
 1bb387d17a28b893a426576b00384a45249c60c4 4203 chromium_76.0.3809.87-1.dsc
 6d8f87ba17d153bf90840c5ea551b925caaeb4a4 248874484 
chromium_76.0.3809.87.orig.tar.xz
 2aa85eb4f56418ee5abeccef380cbe750b97e5b4 201140 
chromium_76.0.3809.87-1.debian.tar.xz
 2e5cb28afe1d096f1f62202ec22601d90f2e4cf7 21352 
chromium_76.0.3809.87-1_source.buildinfo
Checksums-Sha256:
 fde79ed85046e9565a331ce47b576dc0f07fb3e3dd351d1d311dac9f43138f41 4203 
chromium_76.0.3809.87-1.dsc
 afbdbf292ddec9c5812440bff3a2c7b459a7ea5c1aeec90152efb21bdc9a1a56 248874484 
chromium_76.0.3809.87.orig.tar.xz
 b466f9686db6468579e9ab1a5f457995202b991f41d9181e146994b9bf70ada7 201140 
chromium_76.0.3809.87-1.debian.tar.xz
 85fcf18ee0cb945591619554961d2774809fa158072b3d5b40b5c55c43826ec9 21352 
chromium_76.0.3809.87-1_source.buildinfo
Files:
 92f08d4e392d23635a786225c3a2c596 4203 web optional chromium_76.0.3809.87-1.dsc
 d0ba378891da039a7c0edd70fda71fb1 248874484 web optional 
chromium_76.0.3809.87.orig.tar.xz
 29336da5b4504e775d64ae2ce16141a5 201140 web optional 
chromium_76.0.3809.87-1.debian.tar.xz
 e395c48be8f7b6bdf2111be0b27e2285 21352 web optional 
chromium_76.0.3809.87-1_source.buildinfo
Accepted chromium 76.0.3809.87-1 (source) into unstable

Reply via email to
