Bug #1084852 “Chromium still tries to enable NEON on arm* build...” : Bugs : Chromium Browser

Micah Gersten (micahg) on 2012-11-30

description:

updated

Revision history for this message

Gouchi (gouchi) wrote on 2012-12-05:

#1

Please check :
https://code.google.com/p/chromium/issues/detail?id=154107

Thanks to #chromium for the information.

Micah Gersten (micahg) on 2012-12-05

Changed in chromium-browser (Ubuntu Oneiric):
importance:	Undecided → Medium
status:	New → Triaged
Changed in chromium-browser (Ubuntu Precise):
importance:	Undecided → Medium
status:	New → Triaged
Changed in chromium-browser (Ubuntu Quantal):
importance:	Undecided → Medium
status:	New → Triaged

Chad Miller (cmiller) on 2012-12-05

Changed in chromium-browser (Ubuntu):
status:	Triaged → In Progress

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-01-13:

#2

Download full text (7.7 KiB)

This bug was fixed in the package chromium-browser - 23.0.1271.97-0ubuntu0.12.04.1

---------------
chromium-browser (23.0.1271.97-0ubuntu0.12.04.1) precise-security; urgency=low

  * Omit resources/extension/demo files from any packaging verification
    because they're unwanted.
  * Update README.source to include some of these changes.
  * Drop "lzma" from build dependencies.
  * Make most patches follow a common format (no timestamps), to avoid
    future churn.
  * debian/patches/chromium_useragent.patch.in renamed to drop ".in",
    OS "Ubuntu" hardcoded with no compilation-release name, and patch
    refreshed to follow new location of source.
  * In debian/rules, use "-delete" flag on find instead of "-exec rm {} \;",
    to be safer and faster.
  * Also don't include python bytecode or cache files in orig tarball,
    and clean then up on "clean" rule.
  * Write the "REMOVED" list files to the root of the orig tarball,
    instead of inside the src/ directory, where they could collide.
  * Fix dpkg-source warning: Clean up python cached bytecode files.
  * Fix dpkg-source warning: Remove autoconf cache.
  * Fix lintian warning: fta and micahg to XSBC-Original-Maintainer.
  * Fix lintian error not-binnmuable-all-depends-any.
  * Override lintian complaints ancient-autotools-helper-file and
    unused-build-dependency-on-cdbs.
  * debian/patches/arm-neon.patch added to get ARM w/o Neon support.
    (LP: #1084852)
  * In debian/rules, avoid creating invalid subst expression in sed
    of DEBIAN* vars into files.
  * Remove unnecessary glib-header-single-entry.patch .
  * Add patches/struct-siginfo.patch to work around source bug in dereferencing
    internal stuct instead of public type.
  * New upstream version 23.0.1271.97
    - CVE-2012-5139: Use-after-free with visibility events.
    - CVE-2012-5140: Use-after-free in URL loader.
    - CVE-2012-5141: Limit Chromoting client plug-in instantiation.
    - CVE-2012-5142: Crash in history navigation.
    - CVE-2012-5143: Integer overflow in PPAPI image buffers.
    - CVE-2012-5144: Stack corruption in AAC decoding.

chromium-browser (23.0.1271.95-0ubuntu0.12.04.1) UNRELEASED; urgency=low

  [ Micah Gersten <email address hidden> ]
  * New upstream version 23.0.1271.95 (LP: #1086613)
    - CVE-2012-5138: Incorrect file path handling.
    - CVE-2012-5137: Use-after-free in media source handling.
  * Hardcode Ubuntu in Chromium user agent patch; Drop release specific part
    similar to what was done with Firefox; Drop from subst_files in rules
    - rename debian/patches/chromium_useragent.patch.in => debian/patches/chromium_useragent.patch
    - update debian/patches/chromium_useragent.patch
    - update debian/rules
  * Disable user agent patch for the moment as it doesn't apply cleanly
    - update debian/patches/series
  * Switch to xz binary packages, use Pre-Depends on dpkg (>= 1.15.6~)
    - update debian/control
  * Drop armhf FTBFS patch as it's been superseded by upstream changes
    - drop debian/patches/fix-armhf-ftbfs.patch
    - update debian/patches/series

[ Chad Miller <email address hidden> ]
* Add localization support for ast, bs, en-AU, eo, hy, ia, ka, ku, kw, ms....

This bug was fixed in the package chromium-browser - 23.0.1271.97-0ubuntu0.12.04.1

---------------
chromium-browser (23.0.1271.97-0ubuntu0.12.04.1) precise-security; urgency=low

* Omit resources/extension/demo files from any packaging verification
    because they're unwanted.
  * Update README.source to include some of these changes.
  * Drop "lzma" from build dependencies.
  * Make most patches follow a common format (no timestamps), to avoid
    future churn.
  * debian/patches/chromium_useragent.patch.in renamed to drop ".in",
    OS "Ubuntu" hardcoded with no compilation-release name, and patch
    refreshed to follow new location of source.
  * In debian/rules, use "-delete" flag on find instead of "-exec rm {} \;",
    to be safer and faster.
  * Also don't include python bytecode or cache files in orig tarball,
    and clean then up on "clean" rule.
  * Write the "REMOVED" list files to the root of the orig tarball,
    instead of inside the src/ directory, where they could collide.
  * Fix dpkg-source warning: Clean up python cached bytecode files.
  * Fix dpkg-source warning: Remove autoconf cache.
  * Fix lintian warning: fta and micahg to XSBC-Original-Maintainer.
  * Fix lintian error not-binnmuable-all-depends-any.
  * Override lintian complaints ancient-autotools-helper-file and
    unused-build-dependency-on-cdbs.
  * debian/patches/arm-neon.patch added to get ARM w/o Neon support.
    (LP: #1084852)
  * In debian/rules, avoid creating invalid subst expression in sed
    of DEBIAN* vars into files.
  * Remove unnecessary glib-header-single-entry.patch .
  * Add patches/struct-siginfo.patch to work around source bug in dereferencing
    internal stuct instead of public type.
  * New upstream version 23.0.1271.97
    - CVE-2012-5139: Use-after-free with visibility events.
    - CVE-2012-5140: Use-after-free in URL loader.
    - CVE-2012-5141: Limit Chromoting client plug-in instantiation.
    - CVE-2012-5142: Crash in history navigation.
    - CVE-2012-5143: Integer overflow in PPAPI image buffers.
    - CVE-2012-5144: Stack corruption in AAC decoding.

chromium-browser (23.0.1271.95-0ubuntu0.12.04.1) UNRELEASED; urgency=low

[ Micah Gersten <micahg@ubuntu.com> ]
  * New upstream version 23.0.1271.95 (LP: #1086613)
    - CVE-2012-5138: Incorrect file path handling.
    - CVE-2012-5137: Use-after-free in media source handling.
  * Hardcode Ubuntu in Chromium user agent patch; Drop release specific part
    similar to what was done with Firefox; Drop from subst_files in rules
    - rename debian/patches/chromium_useragent.patch.in => debian/patches/chromium_useragent.patch
    - update debian/patches/chromium_useragent.patch
    - update debian/rules
  * Disable user agent patch for the moment as it doesn't apply cleanly
    - update debian/patches/series
  * Switch to xz binary packages, use Pre-Depends on dpkg (>= 1.15.6~)
    - update debian/control
  * Drop armhf FTBFS patch as it's been superseded by upstream changes
    - drop debian/patches/fix-armhf-ftbfs.patch
    - update debian/patches/series

[ Chad Miller <chad.miller@canonical.com> ]
  * Add localization support for ast, bs, en-AU, eo, hy, ia, ka, ku, kw, ms.
  * No longer include Launchpad-generated translations.
  * Disable grd_parse_fix.patch
  * No longer expect unpacked tarball to contain "build-tree".
  * Fix build warning about missing debian/source/format.  Set to "3.0
    (quilt)".
  * Make system-v8 patch use "type none" instead of "type settings".; Leave
    Patch disabled
  * Manually set DEB_{BUILD,HOST}_ARCH when not already set, like when the
    executing program is not dpkg-buildpackage.
  * Make rules file generate LASTCHANGE file at new location.
  * Change get-sources command to kill script when it fails to disable
    gyp-chromium run from DEPS. Never fail silently again.
  * Drop SCM revision from the version.
  * New upstream version 23.0.1271.91
    - CVE-2012-5133: Use-after-free in SVG filters.
    - CVE-2012-5130: Out-of-bounds read in Skia.
    - CVE-2012-5132: Browser crash with chunked encoding.
    - CVE-2012-5134: Buffer underflow in libxml.
    - CVE-2012-5135: Use-after-free with printing.
    - CVE-2012-5136: Bad cast in input element handling.
  * Includes CVE fixes for 23.0.1271.64
    - CVE-2012-5127: Integer overflow leading to out-of-bounds read in WebP
      handling.
    - CVE-2012-5120: Out-of-bounds array access in v8.
    - CVE-2012-5116: Use-after-free in SVG filter handling.
    - CVE-2012-5121: Use-after-free in video layout.
    - CVE-2012-5117: Inappropriate load of SVG subresource in img context.
    - CVE-2012-5119: Race condition in Pepper buffer handling.
    - CVE-2012-5122: Bad cast in input handling.
    - CVE-2012-5123: Out-of-bounds reads in Skia.
    - CVE-2012-5124: Memory corruption in texture handling.
    - CVE-2012-5125: Use-after-free in extension tab handling.
    - CVE-2012-5126: Use-after-free in plug-in placeholder handling.
    - CVE-2012-5128: Bad write in v8.
  * Includes CVE fixes for 22.0.1229.94
    - CVE-2012-5112: SVG use-after-free and IPC arbitrary file write.
  * Includes CVE fixes for 22.0.1229.92
    - CVE-2012-2900: Crash in Skia text rendering.
    - CVE-2012-5108: Race condition in audio device handling.
    - CVE-2012-5109: OOB read in ICU regex.
    - CVE-2012-5110: Out-of-bounds read in compositor.
    - CVE-2012-5111: Plug-in crash monitoring was missing for Pepper plug-ins.
  * Includes CVE fixes for 22.0.1229.79
    - CVE-2012-2889: UXSS in frame handling.
    - CVE-2012-2886: UXSS in v8 bindings.
    - CVE-2012-2881: DOM tree corruption with plug-ins.
    - CVE-2012-2876: Buffer overflow in SSE2 optimizations.
    - CVE-2012-2883: Out-of-bounds write in Skia.
    - CVE-2012-2887: Use-after-free in onclick handling.
    - CVE-2012-2888: Use-after-free in SVG text references.
    - CVE-2012-2894: Crash in graphics context handling.
    - CVE-2012-2877: Browser crash with extensions and modal dialogs.
    - CVE-2012-2879: DOM topology corruption.
    - CVE-2012-2884: Out-of-bounds read in Skia.
    - CVE-2012-2874: Out-of-bounds write in Skia.
    - CVE-2012-2878: Use-after-free in plug-in handling.
    - CVE-2012-2880: Race condition in plug-in paint buffer.
    - CVE-2012-2882: Wild pointer in OGG container handling.
    - CVE-2012-2885: Possible double free on exit.
    - CVE-2012-2891: Address leak over IPC.
    - CVE-2012-2892: Pop-up block bypass.
    - CVE-2012-2893: Double free in XSL transforms.
  * Includes CVE fixes for 21.0.1180.89
    - CVE-2012-2865: Out-of-bounds read in line breaking.
    - CVE-2012-2866: Bad cast with run-ins.
    - CVE-2012-2867: Browser crash with SPDY.
    - CVE-2012-2868: Race condition with workers and XHR.
    - CVE-2012-2869: Avoid stale buffer in URL loading.
    - CVE-2012-2870: Lower severity memory management issues in XPath.
    - CVE-2012-2871: Bad cast in XSL transforms.
    - CVE-2012-2872: XSS in SSL interstitial.
  * Includes CVE fixes for 21.0.1180.57
    - CVE-2012-2846: Cross-process interference in renderers.
    - CVE-2012-2847: Missing re-prompt to user upon excessive downloads.
    - CVE-2012-2848: Overly broad file access granted after drag+drop.
    - CVE-2012-2849: Off-by-one read in GIF decoder.
    - CVE-2012-2853: webRequest can interfere with the Chrome Web Store.
    - CVE-2012-2854: Leak of pointer values to WebUI renderers.
    - CVE-2012-2857: Use-after-free in CSS DOM.
    - CVE-2012-2858: Buffer overflow in WebP decoder.
    - CVE-2012-2859: Crash in tab handling.
    - CVE-2012-2860: Out-of-bounds access when clicking in date picker.
  * Includes CVE fixes for 20.0.1132.57
    - CVE-2012-2842: Use-after-free in counter handling.
    - CVE-2012-2843: Use-after-free in layout height tracking.
 -- Chad Miller <chad.miller@canonical.com>   Sat, 12 Jan 2013 18:49:00 -0600

Changed in chromium-browser (Ubuntu Precise):
status:	Triaged → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-01-13:

#3

Download full text (9.7 KiB)

This bug was fixed in the package chromium-browser - 23.0.1271.97-0ubuntu0.10.04.1

---------------
chromium-browser (23.0.1271.97-0ubuntu0.10.04.1) lucid-security; urgency=low

  * Omit resources/extension/demo files from any packaging verification
    because they're unwanted.
  * Update README.source to include some of these changes.
  * Make most patches follow a common format (no timestamps), to avoid
    future churn.
  * debian/patches/chromium_useragent.patch.in renamed to drop ".in",
    OS "Ubuntu" hardcoded with no compilation-release name, and patch
    refreshed to follow new location of source.
  * In debian/rules, use "-delete" flag on find instead of "-exec rm {} \;",
    to be safer and faster.
  * Put REMOVED files in parent of "src", to be more certain of avoiding
    name collisions.
  * Also don't include python bytecode or cache files in orig tarball,
    and clean then up on "clean" rule.
  * Fix dpkg-source warning: Clean up python cached bytecode files.
  * Fix dpkg-source warning: Remove autoconf cache.
  * Override lintian complaints ancient-autotools-helper-file and
    unused-build-dependency-on-cdbs.
  * debian/patches/arm-neon.patch added to get ARM w/o Neon support.
    (LP: #1084852)
  * In debian/rules, avoid creating invalid subst expression in sed
    of DEBIAN* vars into files.
  * Remove unnecessary glib-header-single-entry.patch .
  * Add patches/struct-siginfo.patch to work around source bug in dereferencing
    internal stuct instead of public type.
  * New upstream version 23.0.1271.97
    - CVE-2012-5139: Use-after-free with visibility events.
    - CVE-2012-5140: Use-after-free in URL loader.
    - CVE-2012-5141: Limit Chromoting client plug-in instantiation.
    - CVE-2012-5142: Crash in history navigation.
    - CVE-2012-5143: Integer overflow in PPAPI image buffers.
    - CVE-2012-5144: Stack corruption in AAC decoding.

chromium-browser (23.0.1271.95-0ubuntu0.10.04.1) lucid-security; urgency=low

  [ Micah Gersten <email address hidden> ]
  * New upstream version 23.0.1271.95 (LP: #1086613)
    - CVE-2012-5138: Incorrect file path handling.
    - CVE-2012-5137: Use-after-free in media source handling.
  * Hardcode Ubuntu in Chromium user agent patch; Drop release specific part
    similar to what was done with Firefox; Drop from subst_files in rules
    - rename debian/patches/chromium_useragent.patch.in => debian/patches/chromium_useragent.patch
    - update debian/patches/chromium_useragent.patch
    - update debian/rules
  * Disable user agent patch for the moment as it doesn't apply cleanly
    - update debian/patches/series
  * Drop Pre-Depends: lzma since we switched to bzip2 binary compression
    - update debian/control

  [ Chad Miller <email address hidden> ]
  * Add localization support for ast, bs, en-AU, eo, hy, ia, ka, ku, kw, ms.
  * No longer include Launchpad-generated translations.
  * No longer expect unpacked tarball to contain "build-tree".
  * Fix build warning about missing debian/source/format. Set to "3.0
    (quilt)".
  * Make system-v8 patch use "type none" instead of "type settings".; Leave
    Patch disabled
  * Manually set DEB_{BUILD,HOST}_ARCH when not already ...

This bug was fixed in the package chromium-browser - 23.0.1271.97-0ubuntu0.10.04.1

---------------
chromium-browser (23.0.1271.97-0ubuntu0.10.04.1) lucid-security; urgency=low

* Omit resources/extension/demo files from any packaging verification
    because they're unwanted.
  * Update README.source to include some of these changes.
  * Make most patches follow a common format (no timestamps), to avoid
    future churn.
  * debian/patches/chromium_useragent.patch.in renamed to drop ".in",
    OS "Ubuntu" hardcoded with no compilation-release name, and patch
    refreshed to follow new location of source.
  * In debian/rules, use "-delete" flag on find instead of "-exec rm {} \;",
    to be safer and faster.
  * Put REMOVED files in parent of "src", to be more certain of avoiding
    name collisions.
  * Also don't include python bytecode or cache files in orig tarball,
    and clean then up on "clean" rule.
  * Fix dpkg-source warning: Clean up python cached bytecode files.
  * Fix dpkg-source warning: Remove autoconf cache.
  * Override lintian complaints ancient-autotools-helper-file and
    unused-build-dependency-on-cdbs.
  * debian/patches/arm-neon.patch added to get ARM w/o Neon support.
    (LP: #1084852)
  * In debian/rules, avoid creating invalid subst expression in sed
    of DEBIAN* vars into files.
  * Remove unnecessary glib-header-single-entry.patch .
  * Add patches/struct-siginfo.patch to work around source bug in dereferencing
    internal stuct instead of public type.
  * New upstream version 23.0.1271.97
    - CVE-2012-5139: Use-after-free with visibility events.
    - CVE-2012-5140: Use-after-free in URL loader.
    - CVE-2012-5141: Limit Chromoting client plug-in instantiation.
    - CVE-2012-5142: Crash in history navigation.
    - CVE-2012-5143: Integer overflow in PPAPI image buffers.
    - CVE-2012-5144: Stack corruption in AAC decoding.

chromium-browser (23.0.1271.95-0ubuntu0.10.04.1) lucid-security; urgency=low

[ Micah Gersten <micahg@ubuntu.com> ]
  * New upstream version 23.0.1271.95 (LP: #1086613)
    - CVE-2012-5138: Incorrect file path handling.
    - CVE-2012-5137: Use-after-free in media source handling.
  * Hardcode Ubuntu in Chromium user agent patch; Drop release specific part
    similar to what was done with Firefox; Drop from subst_files in rules
    - rename debian/patches/chromium_useragent.patch.in => debian/patches/chromium_useragent.patch
    - update debian/patches/chromium_useragent.patch
    - update debian/rules
  * Disable user agent patch for the moment as it doesn't apply cleanly
    - update debian/patches/series
  * Drop Pre-Depends: lzma since we switched to bzip2 binary compression
    - update debian/control

[ Chad Miller <chad.miller@canonical.com> ]
  * Add localization support for ast, bs, en-AU, eo, hy, ia, ka, ku, kw, ms.
  * No longer include Launchpad-generated translations.
  * No longer expect unpacked tarball to contain "build-tree".
  * Fix build warning about missing debian/source/format.  Set to "3.0
    (quilt)".
  * Make system-v8 patch use "type none" instead of "type settings".; Leave
    Patch disabled
  * Manually set DEB_{BUILD,HOST}_ARCH when not already set, like when the
    executing program is not dpkg-buildpackage.
  * Make rules file generate LASTCHANGE file at new location.
  * Switch to bzip2 binary compression
  * Change get-sources command to kill script when it fails to disable
    gyp-chromium run from DEPS. Never fail silently again.
  * Drop SCM revision from the version.
  * New upstream version 23.0.1271.91
    - CVE-2012-5133: Use-after-free in SVG filters.
    - CVE-2012-5130: Out-of-bounds read in Skia.
    - CVE-2012-5132: Browser crash with chunked encoding.
    - CVE-2012-5134: Buffer underflow in libxml.
    - CVE-2012-5135: Use-after-free with printing.
    - CVE-2012-5136: Bad cast in input element handling.
  * Includes CVE fixes for 23.0.1271.64
    - CVE-2012-5127: Integer overflow leading to out-of-bounds read in WebP
      handling.
    - CVE-2012-5120: Out-of-bounds array access in v8.
    - CVE-2012-5116: Use-after-free in SVG filter handling.
    - CVE-2012-5121: Use-after-free in video layout.
    - CVE-2012-5117: Inappropriate load of SVG subresource in img context.
    - CVE-2012-5119: Race condition in Pepper buffer handling.
    - CVE-2012-5122: Bad cast in input handling.
    - CVE-2012-5123: Out-of-bounds reads in Skia.
    - CVE-2012-5124: Memory corruption in texture handling.
    - CVE-2012-5125: Use-after-free in extension tab handling.
    - CVE-2012-5126: Use-after-free in plug-in placeholder handling.
    - CVE-2012-5128: Bad write in v8.
  * Includes CVE fixes for 22.0.1229.94
    - CVE-2012-5112: SVG use-after-free and IPC arbitrary file write.
  * Includes CVE fixes for 22.0.1229.92
    - CVE-2012-2900: Crash in Skia text rendering.
    - CVE-2012-5108: Race condition in audio device handling.
    - CVE-2012-5109: OOB read in ICU regex.
    - CVE-2012-5110: Out-of-bounds read in compositor.
    - CVE-2012-5111: Plug-in crash monitoring was missing for Pepper plug-ins.
  * Includes CVE fixes for 22.0.1229.79
    - CVE-2012-2889: UXSS in frame handling.
    - CVE-2012-2886: UXSS in v8 bindings.
    - CVE-2012-2881: DOM tree corruption with plug-ins.
    - CVE-2012-2876: Buffer overflow in SSE2 optimizations.
    - CVE-2012-2883: Out-of-bounds write in Skia.
    - CVE-2012-2887: Use-after-free in onclick handling.
    - CVE-2012-2888: Use-after-free in SVG text references.
    - CVE-2012-2894: Crash in graphics context handling.
    - CVE-2012-2877: Browser crash with extensions and modal dialogs.
    - CVE-2012-2879: DOM topology corruption.
    - CVE-2012-2884: Out-of-bounds read in Skia.
    - CVE-2012-2874: Out-of-bounds write in Skia.
    - CVE-2012-2878: Use-after-free in plug-in handling.
    - CVE-2012-2880: Race condition in plug-in paint buffer.
    - CVE-2012-2882: Wild pointer in OGG container handling.
    - CVE-2012-2885: Possible double free on exit.
    - CVE-2012-2891: Address leak over IPC.
    - CVE-2012-2892: Pop-up block bypass.
    - CVE-2012-2893: Double free in XSL transforms.
  * Includes CVE fixes for 21.0.1180.89
    - CVE-2012-2865: Out-of-bounds read in line breaking.
    - CVE-2012-2866: Bad cast with run-ins.
    - CVE-2012-2867: Browser crash with SPDY.
    - CVE-2012-2868: Race condition with workers and XHR.
    - CVE-2012-2869: Avoid stale buffer in URL loading.
    - CVE-2012-2870: Lower severity memory management issues in XPath.
    - CVE-2012-2871: Bad cast in XSL transforms.
    - CVE-2012-2872: XSS in SSL interstitial.
  * Includes CVE fixes for 21.0.1180.57
    - CVE-2012-2846: Cross-process interference in renderers.
    - CVE-2012-2847: Missing re-prompt to user upon excessive downloads.
    - CVE-2012-2848: Overly broad file access granted after drag+drop.
    - CVE-2012-2849: Off-by-one read in GIF decoder.
    - CVE-2012-2853: webRequest can interfere with the Chrome Web Store.
    - CVE-2012-2854: Leak of pointer values to WebUI renderers.
    - CVE-2012-2857: Use-after-free in CSS DOM.
    - CVE-2012-2858: Buffer overflow in WebP decoder.
    - CVE-2012-2859: Crash in tab handling.
    - CVE-2012-2860: Out-of-bounds access when clicking in date picker.
  * Includes CVE fixes for 20.0.1132.57
    - CVE-2012-2842: Use-after-free in counter handling.
    - CVE-2012-2843: Use-after-free in layout height tracking.
  * Includes CVE fixes for 20.0.1132.43
    - CVE-2012-2815: Leak of iframe fragment id.
    - CVE-2012-2817: Use-after-free in table section handling.
    - CVE-2012-2818: Use-after-free in counter layout.
    - CVE-2012-2819: Crash in texture handling.
    - CVE-2012-2820: Out-of-bounds read in SVG filter handling.
    - CVE-2012-2821: Autofill display problem.
    - CVE-2012-2823: Use-after-free in SVG resource handling.
    - CVE-2012-2824: Use-after-free in SVG painting.
    - CVE-2012-2826: Out-of-bounds read in texture conversion.
    - CVE-2012-2829: Use-after-free in first-letter handling
    - CVE-2012-2830: Wild pointer in array value setting.
    - CVE-2012-2831: Use-after-free in SVG reference handling.
    - CVE-2012-2834: Integer overflow in Matroska container.
    - CVE-2012-2825: Wild read in XSL handling.
    - CVE-2012-2807: Integer overflows in libxml.
  * Includes CVE fixes for 19.0.1084.52:
    - CVE-2011-3103: Crashes in v8 garbage collection.
    - CVE-2011-3104: Out-of-bounds read in Skia.
    - CVE-2011-3105: Use-after-free in first-letter handling.
    - CVE-2011-3106: Browser memory corruption with websockets over SSL.
    - CVE-2011-3107: Crashes in the plug-in JavaScript bindings.
    - CVE-2011-3108: Use-after-free in browser cache.
    - CVE-2011-3109: Bad cast in GTK UI.
    - CVE-2011-3111: Invalid read in v8.
    - CVE-2011-3115: Type corruption in v8.
  * Includes CVE fixes for initial Chromium 19 release:
    - CVE-2011-3083: Browser crash with video + FTP.
    - CVE-2011-3084: Load links from internal pages in their own process.
    - CVE-2011-3085: UI corruption with long autofilled values.
    - CVE-2011-3086: Use-after-free with style element.
    - CVE-2011-3087: Incorrect window navigation.
    - CVE-2011-3088: Out-of-bounds read in hairline drawing.
    - CVE-2011-3089: Use-after-free in table handling.
    - CVE-2011-3090: Race condition with workers.
    - CVE-2011-3091: Use-after-free with indexed DB.
    - CVE-2011-3092: Invalid write in v8 regex.
    - CVE-2011-3093: Out-of-bounds read in glyph handling.
    - CVE-2011-3094: Out-of-bounds read in Tibetan handling.
    - CVE-2011-3095: Out-of-bounds write in OGG container.
    - CVE-2011-3096: Use-after-free in GTK omnibox handling.
    - CVE-2011-3100: Out-of-bounds read drawing dash paths.
    - CVE-2011-3101: Work around Linux Nvidia driver bug.
    - CVE-2011-3102: Off-by-one out-of-bounds write in libxml.
 -- Chad Miller <chad.miller@canonical.com>   Sat, 12 Jan 2013 19:07:36 -0600

Changed in chromium-browser (Ubuntu):
status:	In Progress → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-01-13:

#4

Download full text (4.8 KiB)

This bug was fixed in the package chromium-browser - 23.0.1271.97-0ubuntu0.12.10.1

---------------
chromium-browser (23.0.1271.97-0ubuntu0.12.10.1) quantal-security; urgency=low

  * Omit resources/extension/demo files from any packaging verification
    because they're unwanted.
  * debian/chromium-driver.install: install chromedriver
  * Update README.source to include some of these changes.
  * Set new URL for channel-release info in rules file.
  * debian/patches/chromium_useragent.patch.in renamed to drop ".in",
    OS "Ubuntu" hardcoded with no compilation-release name, and patch
    refreshed to follow new location of source. Also remove it
    from the list of ephemeral files that "clean" rule removes.
  * In debian/rules, use "-delete" flag on find instead of "-exec rm {} \;",
    to be safer and faster.
  * Make most patches follow a common format (no timestamps or Index lines), to
    avoid future churn.
  * Write the "REMOVED" list files to the root of the orig tarball,
    instead of inside the src/ directory, where they could collide.
  * Fix dpkg-source warning: Clean up python cached bytecode files.
  * Also don't include python bytecode or cache files in orig tarball,
    and clean then up on "clean" rule.
  * Fix dpkg-source warning: Remove autoconf cache.
  * Fix lintian warning: fta and micahg to XSBC-Original-Maintainer.
  * Fix lintian error not-binnmuable-all-depends-any.
  * Override lintian complaints ancient-autotools-helper-file and
    unused-build-dependency-on-cdbs.
  * Drop "lzma" from build dependencies.
  * Set default binary and source package compression to xz. If
    building for Ubuntu 10.04, then make binary's compression to bzip2.
  * List explicit architectures that Chromium supports, instead of "any".
    Cr {arm ia32 x64} map into Debian {armhf armel i386 amd64}.
  * debian/patches/arm-neon.patch added to get ARM w/o Neon support.
    (LP: #1084852)
  * In debian/rules, avoid creating invalid subst expression in sed
    of DEBIAN* vars into files.
  * Note localization in package description for support for ast, bs, en-AU,
    eo, hy, ia, ka, ku, kw, ms.
  * No longer include Launchpad-generated translations. Disable patch
    grd_parse_fix.patch .
  * Set default binary and source package compression to xz. If
    building for Ubuntu 10.04, then make binary's compression to bzip2.
  * No longer expect unpacked tarball to contain "build-tree".
  * Fix build warning about missing debian/source/format. Set to "3.0
    (quilt)".
  * Remove unnecessary glib-header-single-entry.patch .
  * Manually set DEB_{BUILD,HOST}_ARCH when not already set, like when the
    executing program is not dpkg-buildpackage.
  * Make rules file generate LASTCHANGE file at new location.
  * Change get-sources command to kill script when it fails to disable
    gyp-chromium run from DEPS. Never fail silently again.
  * Add patches/struct-siginfo.patch to work around source bug in dereferencing
    internal stuct instead of public type.
  * Refresh patches from lp:unity-chromium-extension .
  * Make all patches follow a common format, to avoid future churn.
    No timestamps, a/b parent, sorted, no index.
  * New upstream v...

	Status	Importance	Assigned to
Chromium Browser	Unknown	Unknown	chromium #154107
chromium-browser (Ubuntu)	Fix Released	High	Chad Miller
Oneiric	Won't Fix	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Quantal	Fix Released	Medium	Unassigned

Chromium Browser

Chromium still tries to enable NEON on arm* builds when told not to

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Changed in chromium-browser (Ubuntu Oneiric):
status:	Triaged → Won't Fix