This bug was fixed in the package chromium-browser -
10.0.648.204~r79063-0ubuntu1
---------------
chromium-browser (10.0.648.204~r79063-0ubuntu1) natty; urgency=high
* New upstream minor release from the Stable Channel (LP: #742118)
This release fixes the following security issues:
+ Webkit bugs:
- [73216] High, CVE-2011-1292: Use-after-free in the frame loader. Credit
to Sławomir Błażek.
- [73595] High, CVE-2011-1293: Use-after-free in HTMLCollection. Credit
to Sergey Glazunov.
- [74562] High, CVE-2011-1294: Stale pointer in CSS handling. Credit to
Sergey Glazunov.
- [74991] High, CVE-2011-1295: DOM tree corruption with broken node
parentage. Credit to Sergey Glazunov.
- [75170] High, CVE-2011-1296: Stale pointer in SVG text handling. Credit
to Sergey Glazunov.
+ Chromium bugs:
- [72517] High, CVE-2011-1291: Buffer error in base string handling.
Credit to Alex Turpin.
Packaging changes:
* Set arm_fpu=vfpv3-d16 on arm (less restrictive than the default vfpv3)
preventing a SIGILL crash on some boards (LP: #735877)
- update debian/control
* Install libppGoogleNaClPluginChrome.so (LP: #738331)
- update debian/rules
- update debian/chromium-browser.install
-- Fabien Tassin <[email protected]> Thu, 24 Mar 2011 23:05:14 +0100
** Changed in: chromium-browser (Ubuntu Natty)
Status: In Progress => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1291
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1292
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1293
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1294
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1295
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1296
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/742118
Title:
10.0.648.133 -> 10.0.648.204
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
