Sophie: chromium-browser-stable-14.0.835.163-0.2.mga1 src

chromium-browser-stable-14.0.835.163-0.2.mga1.src.rpm

Sat Sep 17 2011 dmorgan <dmorgan> 14.0.835.163-0.2.mga1
+ Revision: 144651
- Obsolete beta and unstable versions
- Fix buildrequires
- Use %subrel
- new upstream release 14.0.835.163 (101024)
- security fixes:
* [49377] High CVE-2011-2835: Race condition in the certificate cache
* [57908] Low CVE-2011-2837: Use PIC / pie compiler flags
* [75070] Low CVE-2011-2838: Treat MIME type more authoritatively when
loading plug-ins
* [76771] High CVE-2011-2839: Crash in v8 script object wrappers
* [78427] [83031] Low CVE-2011-2840: Possible URL bar spoofs with unusual
user interaction
* [78639] High CVE-2011-2841: Garbage collection error in PDF
* [82438] Medium CVE-2011-2843: Out-of-bounds read with media buffers
* [85041] Medium CVE-2011-2844: Out-of-bounds read with mp3 files
* [$1000] [89219] High CVE-2011-2846: Use-after-free in unload event handling
* [$1000] [89330] High CVE-2011-2847: Use-after-free in document loader
* [89564] Medium CVE-2011-2848: URL bar spoof with forward button
* [89795] Low CVE-2011-2849: Browser NULL pointer crash with WebSockets
* [89991] Medium CVE-2011-3234: Out-of-bounds read in box handling
* [90134] Medium CVE-2011-2850: Out-of-bounds read with Khmer characters
* [90173] Medium CVE-2011-2851: Out-of-bounds read in video handling
* [91120] High CVE-2011-2852: Off-by-one in v8
* [91197] High CVE-2011-2853: Use-after-free in plug-in handling
* [92651] [94800] High CVE-2011-2854: Use-after-free in ruby / table style
handing
* [92959] High CVE-2011-2855: Stale node in stylesheet handling
* [93416] High CVE-2011-2856: Cross-origin bypass in v8
* [93420] High CVE-2011-2857: Use-after-free in focus controller
* [93472] High CVE-2011-2834: Double free in libxml XPath handling
* [93497] Medium CVE-2011-2859: Incorrect permissions assigned to
non-gallery pages
* [93587] High CVE-2011-2860: Use-after-free in table style handling
* [93596] Medium CVE-2011-2861: Bad string read in PDF
* [93906] High CVE-2011-2862: Unintended access to v8 built-in objects
* [95563] Medium CVE-2011-2864: Out-of-bounds read with Tibetan characters
* [95625] Medium CVE-2011-2858: Out-of-bounds read with triangle arrays
* [95917] Low CVE-2011-2874: Failure to pin a self-signed cert for a session
* [95920] High CVE-2011-2875: Type confusion in v8 object sealing
- detailed changelog at http://goo.gl/6B1kT
- BuildRequires gnutls-devel, otherwise cups-config fails ( from tvignaud )
- Do not apply P3: Fix build
- new upstream release 13.0.782.220 (99552)
* revoking trust for SSL certificates issued by DigiNotar-controlled
intermediate CAs used by the Dutch PKIoverheid program
( mga # 2581 )
Wed May 18 2011 tv <tv> 11.0.696.68-1.mga1
+ Revision: 99600
- new upstream release 11.0.696.68 (stable)
- security fixes
* [64046] High CVE-2011-1799: Bad casts in Chromium WebKit glue.
* [80608] High CVE-2011-1800: Integer overflows in SVG filters.
Sat May 7 2011 tv <tv> 11.0.696.65-1.mga1
+ Revision: 95741
- new upstream release 11.0.696.65 (stable)
Fri Apr 29 2011 tv <tv> 11.0.696.57-1.mga1
+ Revision: 93388
- new upstream release 11.0.696.57 (stable)
(detailed changelog at http://goo.gl/arI9m)
Fri Apr 15 2011 tv <tv> 10.0.648.205-1.mga1
+ Revision: 85803
- new upstream release 10.0.648.205 (stable)
(detailed changelog at http://goo.gl/wJg8b)
Wed Apr 6 2011 tv <tv> 10.0.648.204-1.mga1
+ Revision: 80981
- new upstream release 10.0.648.204 (stable)
- BuildRequires: libevent-devel speex-devel
- fix a group
Tue Mar 22 2011 tv <tv> 10.0.648.151-1.mga1
+ Revision: 75407
- new upstream release 10.0.648.151 (stable)
* blacklist a small number of HTTPS certificates
Wed Mar 16 2011 tv <tv> 10.0.648.133-1.mga1
+ Revision: 72787
- imported package chromium-browser-stable
Sat Mar 12 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.133-1mdv2011.0
+ Revision: 644042
- new upstream release 10.0.648.133 (stable)
* [CVE-2011-1290] fix memory corruption in style handling
- check presence of patch files
Fri Mar 11 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-2
+ Revision: 643848
- apply patches correctly
Wed Mar 9 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-1
+ Revision: 643105
- new upstream release 10.0.648.127 (stable)
* New version of V8 which greatly improves javascript performance
* New settings pages that open in a tab, rather than a dialog box
* Improved security with malware reporting and disabling outdated plugins
by default
* Password sync as part of Chrome Sync now enabled by default
* GPU Accelerated Video
* Background WebApps
* webNavigation extension API
- annoucement and security fix list: http://goo.gl/PWdBi
- move chromium patch 10.0.648.114 from beta channel to stable
- move chromium patch 10.0.648.82 from beta channel to stable
- move chromium patch 10.0.648.127 from beta channel to stable
- move chromium patch 10.0.648.126 from beta channel to stable
- move chromium 10.0.648.45 from beta channel to stable
- move patch from beta channel to stable
- move patch from beta channel to stable
Tue Mar 1 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.107-1
+ Revision: 641075
- new upstream release 9.0.597.107 (stable)
- contains security fixes, see detais at http://goo.gl/rkTSm
- add beta browser to the downgrade notice in spec description
Sat Feb 12 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.98-1
+ Revision: 637364
- new upstream version 9.0.597.98
- add conflicts to beta channel browser
- add obsoletes entry for old (canary) chromium-browser package
Thu Feb 10 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.94-1
+ Revision: 637082
- imported package chromium-browser-stable