~chromium-team/chromium-browser/beta

« back to all changes in this revision

Viewing changes to debian/source/lintian-overrides

  • Committer: Chad Miller
  • Date: 2013-08-27 16:58:09 UTC
  • mfrom: (915.1.13 saucy-working)
  • Revision ID: chad.miller@canonical.com-20130827165809-up7594cwptx3v6mz
* New release 29.0.1547.57:  (LP: #1215361)
  - CVE-2013-2900: Incomplete path sanitization in file handling.
  - CVE-2013-2905: Information leak via overly broad permissions on shared
    memory files.
  - CVE-2013-2901: Integer overflow in ANGLE.
  - CVE-2013-2902: Use after free in XSLT.
  - CVE-2013-2903: Use after free in media element.
  - CVE-2013-2904: Use after free in document parsing.
  - CVE-2013-2887: Various fixes from internal audits, fuzzing and other
    initiatives (Chrome 29).
* debian/rules: Fix packaging-sanity test.
* debian/patches/search-credit.patch:  Update URLs.
* debian/patches/disable_dlog_and_dcheck_in_release_builds.patch,
  debian/patches/wehkit_rev_parser.patch,
    No longer necessary.  Deleted.
* debian/chromium-browser.sh.in: Include command-line parameters for
  registered plugins.
* Since we include remoting locales too, also split its locales info 
  into the -l10n package correctly.
* debian/rules: Disable arm_neon_optional. Impossible with sandbox, AND
  breaks build right now.
* debian/rules:
  - Make unused-file matches simpler, and install rule more descriptive.
  - get-orig-source has to make the directory for the orig contents. 
* debian/source/lintian-overrides:
  - Add old-fsf-address-in-copyright-file and image-file-in-usr-lib
  - Fix setuid-binary to be "source". Seems like it should be "binary". :(
* debian/checkout-orig-source.mk: Remove tests and add unofficialness
  marker file to orig tarball when we can't use upstream orig releases.
* debian/control: Set VCS URL to be accurate.
* debian/rules: Start rule to create patch that includes Launchpad
  translations.  Never change upstream orig tarball.  This will be a 
  release-time manual rule that updates a quilt patch.
* New release 28.0.1500.95:
  - CVE-2013-2881: Origin bypass in frame handling.
  - CVE-2013-2882: Type confusion in V8.
  - CVE-2013-2883: Use-after-free in MutationObserver.
  - CVE-2013-2884: Use-after-free in DOM.
  - CVE-2013-2885: Use-after-free in input handling.
  - CVE-2013-2886: Various fixes from internal audits, fuzzing and other
    initiatives.
* debian/rules:
  - Keepalive in tests rule, to keep builder machines from reaping.
  - Further exclude a few tests that interact with fakeroot,
    ReadOnlyFileUtilTest.
* debian/rules:
  - Disable logging calls in chromium binary to save several MB of executable
    size.
* debian/patches/linker-asneeded-bug.patch:
  - Add patch to work around linker bug.
* debian/keep-alive.sh:
  - Treat disappearing /proc as error, and quit. 

Show diffs side-by-side

added added

removed removed

Lines of Context:
2
2
chromium-codecs-ffmpeg-extra-dbg binary: package-has-long-file-name 71 (81) > 80
3
3
 
4
4
# Sandbox program is a security measure, and well trusted.
5
 
chromium-browser binary: setuid-binary usr/lib/chromium-browser/chromium-browser-sandbox 4755 root/root
 
5
chromium-browser source: setuid-binary usr/lib/chromium-browser/chromium-browser-sandbox 4755 root/root
6
6
 
7
7
# Weird security policy for Ubuntu, that upstream moves so quickly that 1) bugs
8
8
# are fixed in embedded libraries quickly, and 2) using system libraries would
9
9
# be too difficult to test.
10
10
embedded-library
11
11
 
 
12
# What is snail mail?
 
13
old-fsf-address-in-copyright-file
 
14
 
 
15
# Upstream looks in lib for these resources. Figure out how to move to share.
 
16
chromium-browser binary: image-file-in-usr-lib usr/lib/chromium-browser/resources/inspector/Images/*
 
17
 
12
18
#chromium-browser binary: embedded-library usr/lib/chromium-browser/libs/libwebkit.so: libpng
13
19
#chromium-browser binary: embedded-library usr/lib/chromium-browser/libs/libui.so: libjpeg
14
20
#chromium-browser binary: embedded-library usr/lib/chromium-browser/libs/libwebkit.so: libjpeg