This bug was fixed in the package chromium-browser -
12.0.742.112~r90304-0ubuntu0.10.10.1

---------------
chromium-browser (12.0.742.112~r90304-0ubuntu0.10.10.1) maverick-security; 
urgency=low

  [ Fabien Tassin <[email protected]> ]
  * New Minor upstream release from the Stable Channel (LP: #803107)
    This release fixes the following security issues:
    + WebKit issues:
      - [84355] High, CVE-2011-2346: Use-after-free in SVG font handling.
        Credit to miaubiz.
      - [85003] High, CVE-2011-2347: Memory corruption in CSS parsing. Credit
        to miaubiz.
      - [85102] High, CVE-2011-2350: Lifetime and re-entrancy issues in the
        HTML parser. Credit to miaubiz.
      - [85211] High, CVE-2011-2351: Use-after-free with SVG use element.
        Credit to miaubiz.
      - [85418] High, CVE-2011-2349: Use-after-free in text selection. Credit
        to miaubiz.
    + Chromium issues:
      - [77493] Medium, CVE-2011-2345: Out-of-bounds read in NPAPI string
        handling. Credit to Philippe Arteau.
      - [85177] High, CVE-2011-2348: Bad bounds check in v8. Credit to Aki
        Helin of OUSPG.

  [ Micah Gersten <[email protected]> ]
  * Drop armel again from control file to not block on i386/amd64 updates
    - update debian/control
 -- Micah Gersten <[email protected]>   Thu, 30 Jun 2011 11:14:27 +0100

** Changed in: chromium-browser (Ubuntu Maverick)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/803107

Title:
  12.0.742.91 -> 12.0.742.112

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/803107/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to