- Wed Dec 14 2011 dmorgan <dmorgan> 16.0.912.63-0.1.mga1
+ Revision: 181432
- new upstream release 16.0.912.63 (113337)
- security fixes
* [81753] Medium CVE-2011-3903: Out-of-bounds read in regex matching.
* [95465] Low CVE-2011-3905: Out-of-bounds reads in libxml.
* [98809] Medium CVE-2011-3906: Out-of-bounds read in PDF parser.
* [99016] High CVE-2011-3907: URL bar spoofing with view-source.
* [100863] Low CVE-2011-3908: Out-of-bounds read in SVG parsing.
* [101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in CSS
property array.
* [101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video frame
handling.
* [101779] Medium CVE-2011-3911: Out-of-bounds read in PDF.
* [102359] High CVE-2011-3912: Use-after-free in SVG filters.
* [103921] High CVE-2011-3913: Use-after-free in Range handling.
* [104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n handling.
* [104529] High CVE-2011-3915: Buffer overflow in PDF font handling.
* [104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross references.
* [105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher.
* [107258] High CVE-2011-3904: Use-after-free in bidi handling.
- New version 15.0.874.120
- new upstream release 15.0.874.102 (106587)
* [86758] High CVE-2011-2845: URL bar spoof in history handling.
* [88949] Medium CVE-2011-3875: URL bar spoof with drag+drop of URLs.
* [90217] Low CVE-2011-3876: Avoid stripping whitespace at the end of
download filenames.
* [91218] Low CVE-2011-3877: XSS in appcache internals page.
* [94487] Medium CVE-2011-3878: Race condition in worker process
initialization.
* [95374] Low CVE-2011-3879: Avoid redirect to chrome scheme URIs.
* [95992] Low CVE-2011-3880: Don't permit as a HTTP header delimiter.
* [96047][96885][98053][99512][99750] High CVE-2011-3881: Cross-origin
policy violations.
* [96292] High CVE-2011-3882: Use-after-free in media buffer handling.
* [96902] High CVE-2011-3883: Use-after-free in counter handling.
* [97148] High CVE-2011-3884: Timing issues in DOM traversal.
* [97599][98064][98556][99294][99880][100059] High CVE-2011-3885: Stale
style bugs leading to use-after-free.
* [98773][99167] High CVE-2011-3886: Out of bounds writes in v8.
* [98407] Medium CVE-2011-3887: Cookie theft with javascript URIs.
* [99138] High CVE-2011-3888: Use-after-free with plug-in and editing.
* [99211] High CVE-2011-3889: Heap overflow in Web Audio.
* [99553] High CVE-2011-3890: Use-after-free in video source handling.
* [100332] High CVE-2011-3891: Exposure of internal v8 functions.
- Obsolete beta and unstable versions
- Fix buildrequires
- Use %subrel
- new upstream release 14.0.835.163 (101024)
- security fixes:
* [49377] High CVE-2011-2835: Race condition in the certificate cache
* [57908] Low CVE-2011-2837: Use PIC / pie compiler flags
* [75070] Low CVE-2011-2838: Treat MIME type more authoritatively when
loading plug-ins
* [76771] High CVE-2011-2839: Crash in v8 script object wrappers
* [78427] [83031] Low CVE-2011-2840: Possible URL bar spoofs with unusual
user interaction
* [78639] High CVE-2011-2841: Garbage collection error in PDF
* [82438] Medium CVE-2011-2843: Out-of-bounds read with media buffers
* [85041] Medium CVE-2011-2844: Out-of-bounds read with mp3 files
* [$1000] [89219] High CVE-2011-2846: Use-after-free in unload event handling
* [$1000] [89330] High CVE-2011-2847: Use-after-free in document loader
* [89564] Medium CVE-2011-2848: URL bar spoof with forward button
* [89795] Low CVE-2011-2849: Browser NULL pointer crash with WebSockets
* [89991] Medium CVE-2011-3234: Out-of-bounds read in box handling
* [90134] Medium CVE-2011-2850: Out-of-bounds read with Khmer characters
* [90173] Medium CVE-2011-2851: Out-of-bounds read in video handling
* [91120] High CVE-2011-2852: Off-by-one in v8
* [91197] High CVE-2011-2853: Use-after-free in plug-in handling
* [92651] [94800] High CVE-2011-2854: Use-after-free in ruby / table style
handing
* [92959] High CVE-2011-2855: Stale node in stylesheet handling
* [93416] High CVE-2011-2856: Cross-origin bypass in v8
* [93420] High CVE-2011-2857: Use-after-free in focus controller
* [93472] High CVE-2011-2834: Double free in libxml XPath handling
* [93497] Medium CVE-2011-2859: Incorrect permissions assigned to
non-gallery pages
* [93587] High CVE-2011-2860: Use-after-free in table style handling
* [93596] Medium CVE-2011-2861: Bad string read in PDF
* [93906] High CVE-2011-2862: Unintended access to v8 built-in objects
* [95563] Medium CVE-2011-2864: Out-of-bounds read with Tibetan characters
* [95625] Medium CVE-2011-2858: Out-of-bounds read with triangle arrays
* [95917] Low CVE-2011-2874: Failure to pin a self-signed cert for a session
* [95920] High CVE-2011-2875: Type confusion in v8 object sealing
- detailed changelog at http://goo.gl/6B1kT
- BuildRequires gnutls-devel, otherwise cups-config fails ( from tvignaud )
- Do not apply P3: Fix build
- new upstream release 13.0.782.220 (99552)
* revoking trust for SSL certificates issued by DigiNotar-controlled
intermediate CAs used by the Dutch PKIoverheid program
( mga # 2581 ) - Wed May 18 2011 tv <tv> 11.0.696.68-1.mga1
+ Revision: 99600
- new upstream release 11.0.696.68 (stable)
- security fixes
* [64046] High CVE-2011-1799: Bad casts in Chromium WebKit glue.
* [80608] High CVE-2011-1800: Integer overflows in SVG filters. - Sat May 7 2011 tv <tv> 11.0.696.65-1.mga1
+ Revision: 95741
- new upstream release 11.0.696.65 (stable) - Fri Apr 29 2011 tv <tv> 11.0.696.57-1.mga1
+ Revision: 93388
- new upstream release 11.0.696.57 (stable)
(detailed changelog at http://goo.gl/arI9m) - Fri Apr 15 2011 tv <tv> 10.0.648.205-1.mga1
+ Revision: 85803
- new upstream release 10.0.648.205 (stable)
(detailed changelog at http://goo.gl/wJg8b) - Wed Apr 6 2011 tv <tv> 10.0.648.204-1.mga1
+ Revision: 80981
- new upstream release 10.0.648.204 (stable)
- BuildRequires: libevent-devel speex-devel
- fix a group - Tue Mar 22 2011 tv <tv> 10.0.648.151-1.mga1
+ Revision: 75407
- new upstream release 10.0.648.151 (stable)
* blacklist a small number of HTTPS certificates - Wed Mar 16 2011 tv <tv> 10.0.648.133-1.mga1
+ Revision: 72787
- imported package chromium-browser-stable - Sat Mar 12 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.133-1mdv2011.0
+ Revision: 644042
- new upstream release 10.0.648.133 (stable)
* [CVE-2011-1290] fix memory corruption in style handling
- check presence of patch files - Fri Mar 11 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-2
+ Revision: 643848
- apply patches correctly - Wed Mar 9 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-1
+ Revision: 643105
- new upstream release 10.0.648.127 (stable)
* New version of V8 which greatly improves javascript performance
* New settings pages that open in a tab, rather than a dialog box
* Improved security with malware reporting and disabling outdated plugins
by default
* Password sync as part of Chrome Sync now enabled by default
* GPU Accelerated Video
* Background WebApps
* webNavigation extension API
- annoucement and security fix list: http://goo.gl/PWdBi
- move chromium patch 10.0.648.114 from beta channel to stable
- move chromium patch 10.0.648.82 from beta channel to stable
- move chromium patch 10.0.648.127 from beta channel to stable
- move chromium patch 10.0.648.126 from beta channel to stable
- move chromium 10.0.648.45 from beta channel to stable
- move patch from beta channel to stable
- move patch from beta channel to stable - Tue Mar 1 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.107-1
+ Revision: 641075
- new upstream release 9.0.597.107 (stable)
- contains security fixes, see detais at http://goo.gl/rkTSm
- add beta browser to the downgrade notice in spec description - Sat Feb 12 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.98-1
+ Revision: 637364
- new upstream version 9.0.597.98
- add conflicts to beta channel browser
- add obsoletes entry for old (canary) chromium-browser package - Thu Feb 10 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.94-1
+ Revision: 637082
- imported package chromium-browser-stable
