This bug was fixed in the package chromium-browser -
67.0.3396.62-0ubuntu1
---
chromium-browser (67.0.3396.62-0ubuntu1) cosmic; urgency=medium
* Upstream release: 67.0.3396.62
- CVE-2018-6123: Use after free in Blink.
- CVE-2018-6124: Type confusion in Blink.
- CVE-2018-6125: Overly permissive policy in WebUSB.
- CVE-2018-6126: Heap buffer overflow in Skia.
- CVE-2018-6127: Use after free in indexedDB.
- CVE-2018-6128: uXSS in Chrome on iOS.
- CVE-2018-6129: Out of bounds memory access in WebRTC.
- CVE-2018-6130: Out of bounds memory access in WebRTC.
- CVE-2018-6131: Incorrect mutability protection in WebAssembly.
- CVE-2018-6132: Use of uninitialized memory in WebRTC.
- CVE-2018-6133: URL spoof in Omnibox.
- CVE-2018-6134: Referrer Policy bypass in Blink.
- CVE-2018-6135: UI spoofing in Blink.
- CVE-2018-6136: Out of bounds memory access in V8.
- CVE-2018-6137: Leak of visited status of page in Blink.
- CVE-2018-6138: Overly permissive policy in Extensions.
- CVE-2018-6139: Restrictions bypass in the debugger extension API.
- CVE-2018-6140: Restrictions bypass in the debugger extension API.
- CVE-2018-6141: Heap buffer overflow in Skia.
- CVE-2018-6142: Out of bounds memory access in V8.
- CVE-2018-6143: Out of bounds memory access in V8.
- CVE-2018-6144: Out of bounds memory access in PDFium.
- CVE-2018-6145: Incorrect escaping of MathML in Blink.
- CVE-2018-6147: Password fields not taking advantage of OS protections in
Views.
* debian/rules: stop installing an outdated chromium-browser.svg icon
(LP: #1771847)
* debian/chromium-browser.svg: removed (outdated)
* debian/patches/additional-search-engines.patch: refreshed
* debian/patches/configuration-directory.patch: refreshed
* debian/patches/default-allocator: refreshed
* debian/patches/disable-sse2: updated
* debian/patches/fix-crashpad-linux-compat.patch: added
* debian/patches/fix-extra-arflags.patch: added
* debian/patches/revert-clang-nostdlib++.patch: refreshed
* debian/patches/revert-Xclang-instcombine-lower-dbg-declare.patch: refreshed
* debian/patches/search-credit.patch: refreshed
* debian/patches/set-rpath-on-chromium-executables.patch: refreshed
* debian/patches/skia-disable-neon.patch: removed, no longer needed
* debian/patches/skia-undef-HWCAP_CRC32.patch: refreshed
* debian/patches/suppress-newer-clang-warning-flags.patch: updated
* debian/patches/widevine-allow-enable.patch: added
* debian/patches/widevine-other-locations: updated
-- Olivier Tilloy Wed, 30 May 2018
12:22:22 +0200
** Changed in: chromium-browser (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6123
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6124
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6125
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6126
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6127
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6128
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6129
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6130
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6131
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6132
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6133
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6134
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6135
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6136
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6137
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6138
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6139
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6140
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6141
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6142
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6143
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6144
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6145
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-6147
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1771847
Title:
chromium-browser.svg icon is outdated
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1771847/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
