lp:~chromium-team/chromium-browser/raring-working
- Get this branch:
- bzr branch lp:~chromium-team/chromium-browser/raring-working
Branch merges
Branch information
Recent revisions
- 900. By Chad Miller
-
* Upstream release 32.0.1700.77: (LP: #1269387)
- Tab indicators for sound, webcam and casting
- Automatically blocking malware files
- A number of new apps/extension APIs
- Lots of under the hood changes for stability and performance
- CVE-2013-6646: Use-after-free in web workers.
- CVE-2013-6641: Use-after-free related to forms.
- CVE-2013-6642: Address bar spoofing in Chrome for Android.
- CVE-2013-6643: Unprompted sync with an attacker’s Google account.
- CVE-2013-6645: Use-after-free related to speech input elements.
- CVE-2013-6644: Various fixes from internal audits, fuzzing and other
initiatives.
* Re-merged webapps patches. - 899. By Chad Miller
-
* New release 31.0.1650.63:
- CVE-2013-6634: Session fixation in sync related to 302 redirects.
- CVE-2013-6635: Use-after-free in editing.
- CVE-2013-6636: Address bar spoofing related to modal dialogs.
- CVE-2013-6637: Various fixes from internal audits, fuzzing and other
initiatives.
- CVE-2013-6638: Buffer overflow in v8. This issue was fixed in v8 version
3.22.24.7.
- CVE-2013-6639: Out of bounds write in v8. This issue was fixed in v8
version 3.22.24.7.
- CVE-2013-6640: Out of bounds read in v8. This issue was fixed in v8
version 3.22.24.7. - 897. By Chad Miller
-
* debian/control: Drop libnss version number in Depends. We only need to
recompile. (LP: #1251454) - 895. By Chad Miller
-
* Include dmesg events mentioning chromium in apport reports.
* Abandon nss transitional package as Dependency, and add real package with
epoch version number but no distro subversion. - 893. By Chad Miller
-
* New release 31.0.1650.57:
- CVE-2013-6632: Multiple memory corruption issues.
* New release 31.0.1650.48: (LP: #1250579)
- CVE-2013-6621: Use after free related to speech input elements.
- CVE-2013-6622: Use after free related to media elements.
- CVE-2013-6623: Out of bounds read in SVG.
- CVE-2013-6624: Use after free related to "id" attribute strings.
- CVE-2013-6625: Use after free in DOM ranges.
- CVE-2013-6626: Address bar spoofing related to interstitial warnings.
- CVE-2013-6627: Out of bounds read in HTTP parsing.
- CVE-2013-6628: Issue with certificates not being checked during TLS
renegotiation.
- CVE-2013-2931: Various fixes from internal audits, fuzzing and other
initiatives.
- CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
- CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
- CVE-2013-6631: Use after free in libjingle.
* Update webapps patches.
* Disable chromedriver testing until the new server-test client dependencies
are figured out.
* Drop base_unittests and automated_ui_tests build and automatic test and
from installation exclusion.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)