~chromium-team/chromium-browser/bionic-stable : changes

~chromium-team/chromium-browser/bionic-stable » Changes from revision 1702

From Revision 1686 to 1667

Rev	Summary	Authors	Tags	Date
1686	* Upstream release: 105.0.5195.52 * Upstream release: 105.0.5195.52 - CVE-2022-3038: Use after free in Network Service. - CVE-2022-3039: Use after free in WebSQL. - CVE-2022-3040: Use after free in Layout. - CVE-2022-3041: Use after free in WebSQL. - CVE-2022-3042: Use after free in PhoneHub. - CVE-2022-3043: Heap buffer overflow in Screen Capture. - CVE-2022-3044: Inappropriate implementation in Site Isolation. - CVE-2022-3045: Insufficient validation of untrusted input in V8. - CVE-2022-3046: Use after free in Browser Tag. - CVE-2022-3047: Insufficient policy enforcement in Extensions API. - CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen. - CVE-2022-3049: Use after free in SplitScreen. - CVE-2022-3050: Heap buffer overflow in WebUI. - CVE-2022-3051: Heap buffer overflow in Exosphere. - CVE-2022-3052: Heap buffer overflow in Window Manager. - CVE-2022-3053: Inappropriate implementation in Pointer Lock. - CVE-2022-3054: Insufficient policy enforcement in DevTools. - CVE-2022-3055: Use after free in Passwords. - CVE-2022-3056: Insufficient policy enforcement in Content Security Policy. - CVE-2022-3057: Inappropriate implementation in iframe Sandbox. - CVE-2022-3058: Use after free in Sign-In Flow. * debian/patches/allow-building-on-x86.patch: refreshed * debian/patches/blink-math-constexpr.patch: removed, no longer needed * debian/patches/build-no-invalid-constexpr-error.patch: added * debian/patches/build-with-old-libva-missing-defines.patch: refreshed * debian/patches/build-with-old-libva-no-av1.patch: refreshed * debian/patches/configuration-directory.patch: refreshed * debian/patches/linker-oom-armhf.patch: refreshed * debian/patches/no-dirmd.patch: refreshed * debian/patches/nodejs-fs-promises.patch: added * debian/patches/partition-allocator-constexpr.patch: removed, no longer needed * debian/patches/partition-allocator-constexpr2.patch: removed, no longer needed * debian/patches/search-credit.patch: refreshed * debian/patches/set-rpath-on-chromium-executables.patch: refreshed * debian/patches/suppress-newer-clang-warning-flags.patch: refreshed * debian/patches/use-clang-versioned.patch: refreshed * debian/patches/widevine-other-locations: refreshed	Olivier Tilloy		1 year ago
1685	releasing package chromium-browser version releasing package chromium-browser version 104.0.5112.101-0ubuntu0.18.04.1	Olivier Tilloy	104.0.5112.101-0ubuntu0.18.04.1	1 year ago
1684	* Upstream release: 104.0.5112.101 * Upstream release: 104.0.5112.101 - CVE-2022-2852: Use after free in FedCM. - CVE-2022-2854: Use after free in SwiftShader. - CVE-2022-2855: Use after free in ANGLE. - CVE-2022-2857: Use after free in Blink. - CVE-2022-2858: Use after free in Sign-In Flow. - CVE-2022-2853: Heap buffer overflow in Downloads. - CVE-2022-2856: Insufficient validation of untrusted input in Intents. - CVE-2022-2859: Use after free in Chrome OS Shell. - CVE-2022-2860: Insufficient policy enforcement in Cookies. - CVE-2022-2861: Inappropriate implementation in Extensions API.	Olivier Tilloy		1 year ago
1683	releasing package chromium-browser version releasing package chromium-browser version 104.0.5112.79-0ubuntu0.18.04.1	Olivier Tilloy	104.0.5112.79-0ubuntu0.18.04.1	1 year ago
1682	* Upstream release: 104.0.5112.79 * Upstream release: 104.0.5112.79 - CVE-2022-2603: Use after free in Omnibox. - CVE-2022-2604: Use after free in Safe Browsing. - CVE-2022-2605: Out of bounds read in Dawn. - CVE-2022-2606: Use after free in Managed devices API. - CVE-2022-2607: Use after free in Tab Strip. - CVE-2022-2608: Use after free in Overview Mode. - CVE-2022-2609: Use after free in Nearby Share. - CVE-2022-2610: Insufficient policy enforcement in Background Fetch. - CVE-2022-2611: Inappropriate implementation in Fullscreen API. - CVE-2022-2612: Side-channel information leakage in Keyboard input. - CVE-2022-2613: Use after free in Input. - CVE-2022-2614: Use after free in Sign-In Flow. - CVE-2022-2615: Insufficient policy enforcement in Cookies. - CVE-2022-2616: Inappropriate implementation in Extensions API. - CVE-2022-2617: Use after free in Extensions API. - CVE-2022-2618: Insufficient validation of untrusted input in Internals. - CVE-2022-2619: Insufficient validation of untrusted input in Settings. - CVE-2022-2620: Use after free in WebUI. - CVE-2022-2621: Use after free in Extensions. - CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing. - CVE-2022-2623: Use after free in Offline. - CVE-2022-2624: Heap buffer overflow in PDF. * debian/patches/allow-building-on-x86.patch: refreshed * debian/patches/blink-math-constexpr.patch: refreshed * debian/patches/build-with-old-libva-missing-defines.patch: refreshed * debian/patches/build-with-old-libva-no-av1.patch: refreshed * debian/patches/mako-revert-importlib-use.patch: added * debian/patches/partition-allocator-clang-name-confusion.patch: refreshed * debian/patches/partition-allocator-constexpr.patch: refreshed * debian/patches/qualify-ambiguous-name-lookup.patch: removed, no longer needed * debian/patches/set-rpath-on-chromium-executables.patch: refreshed * debian/patches/suppress-newer-clang-warning-flags.patch: refreshed	Olivier Tilloy		1 year ago
1681	releasing package chromium-browser version releasing package chromium-browser version 103.0.5060.134-0ubuntu0.18.04.1	Olivier Tilloy	103.0.5060.134-0ubuntu0.18.04.1	1 year ago
1680	* Upstream release: 103.0.5060.134 * Upstream release: 103.0.5060.134 - CVE-2022-2477 : Use after free in Guest View. - CVE-2022-2478 : Use after free in PDF. - CVE-2022-2479 : Insufficient validation of untrusted input in File. - CVE-2022-2480 : Use after free in Service Worker API. - CVE-2022-2481: Use after free in Views. - CVE-2022-2163: Use after free in Cast UI and Toolbar.	Olivier Tilloy		1 year ago
1679	releasing package chromium-browser version releasing package chromium-browser version 103.0.5060.114-0ubuntu0.18.04.1	Olivier Tilloy	103.0.5060.114-0ubuntu0.18.04.1	1 year ago
1678	* Upstream release: 103.0.5060.114 * Upstream release: 103.0.5060.114 - CVE-2022-2294: Heap buffer overflow in WebRTC. - CVE-2022-2295: Type Confusion in V8. - CVE-2022-2296: Use after free in Chrome OS Shell.	Olivier Tilloy		1 year ago
1677	releasing package chromium-browser version releasing package chromium-browser version 103.0.5060.53-0ubuntu0.18.04.1	Olivier Tilloy	103.0.5060.53-0ubuntu0.18.04.1	1 year ago
1676	* Upstream release: 103.0.5060.53 * Upstream release: 103.0.5060.53 - CVE-2022-2156: Use after free in Base - CVE-2022-2157: Use after free in Interest groups - CVE-2022-2158: Type Confusion in V8 - CVE-2022-2160: Insufficient policy enforcement in DevTools - CVE-2022-2161: Use after free in WebApp Provider - CVE-2022-2162: Insufficient policy enforcement in File System API - CVE-2022-2163: Use after free in Cast UI and Toolbar - CVE-2022-2164: Inappropriate implementation in Extensions API - CVE-2022-2165: Insufficient data validation in URL formatting. * debian/patches/allow-building-on-x86.patch: refreshed * debian/patches/build-with-old-libva-missing-defines.patch: refreshed * debian/patches/build-with-old-libva-no-av1.patch: refreshed * debian/patches/configuration-directory.patch: refreshed * debian/patches/linker-oom-armhf.patch: added * debian/patches/partition-allocator-constexpr2.patch: refreshed * debian/patches/search-credit.patch: refreshed * debian/patches/segmentation-platform-constexpr.patch: removed, no longer needed * debian/patches/set-rpath-on-chromium-executables.patch: refreshed * debian/patches/suppress-newer-clang-warning-flags.patch: refreshed * debian/patches/widevine-other-locations: refreshed	Olivier Tilloy		1 year ago
1675	releasing package chromium-browser version releasing package chromium-browser version 102.0.5005.115-0ubuntu0.18.04.1	Olivier Tilloy	102.0.5005.115-0ubuntu0.18.04.1	1 year ago
1674	* Upstream release: 102.0.5005.115 * Upstream release: 102.0.5005.115 - CVE-2022-2007: Use after free in WebGPU. - CVE-2022-2008: Out of bounds memory access in WebGL. - CVE-2022-2010: Out of bounds read in compositing. - CVE-2022-2011: Use after free in ANGLE.	Olivier Tilloy		1 year ago
1673	releasing package chromium-browser version releasing package chromium-browser version 102.0.5005.61-0ubuntu0.18.04.1	Olivier Tilloy	102.0.5005.61-0ubuntu0.18.04.1	1 year ago
1672	* Upstream release: 102.0.5005.61 * Upstream release: 102.0.5005.61 - CVE-2022-1853: Use after free in Indexed DB. - CVE-2022-1854: Use after free in ANGLE. - CVE-2022-1855: Use after free in Messaging. - CVE-2022-1856: Use after free in User Education. - CVE-2022-1857: Insufficient policy enforcement in File System API. - CVE-2022-1858: Out of bounds read in DevTools. - CVE-2022-1859: Use after free in Performance Manager. - CVE-2022-1860: Use after free in UI Foundations. - CVE-2022-1861: Use after free in Sharing. - CVE-2022-1862: Inappropriate implementation in Extensions. - CVE-2022-1863: Use after free in Tab Groups. - CVE-2022-1864: Use after free in WebApp Installs. - CVE-2022-1865: Use after free in Bookmarks. - CVE-2022-1866: Use after free in Tablet Mode. - CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer. - CVE-2022-1868: Inappropriate implementation in Extensions API. - CVE-2022-1869: Type Confusion in V8. - CVE-2022-1870: Use after free in App Service. - CVE-2022-1871: Insufficient policy enforcement in File System API. - CVE-2022-1872: Insufficient policy enforcement in Extensions API. - CVE-2022-1873: Insufficient policy enforcement in COOP. - CVE-2022-1874: Insufficient policy enforcement in Safe Browsing. - CVE-2022-1875: Inappropriate implementation in PDF. - CVE-2022-1876: Heap buffer overflow in DevTools. * debian/control: add a build dependency on git * debian/rules: build with arm_control_flow_integrity="none", because the default value of "pac" on arm64 requires Arm-v8.3+ * debian/patches/allow-building-on-x86.patch: added * debian/patches/build-with-old-libva-no-av1.patch: refreshed * debian/patches/partition-allocator-clang-name-confusion.patch: refreshed * debian/patches/partition-allocator-constexpr2.patch: updated * debian/patches/partition-allocator-missing-ioctl.patch: refreshed * debian/patches/suppress-newer-clang-warning-flags.patch: refreshed * debian/patches/title-bar-default-system.patch-v35: refreshed * debian/patches/use-clang-versioned.patch: refreshed	Olivier Tilloy		1 year ago
1671	releasing package chromium-browser version releasing package chromium-browser version 101.0.4951.64-0ubuntu0.18.04.1	Olivier Tilloy	101.0.4951.64-0ubuntu0.18.04.1	1 year ago
1670	* Upstream release: 101.0.4951.64 * Upstream release: 101.0.4951.64 - CVE-2022-1633: Use after free in Sharesheet. - CVE-2022-1634: Use after free in Browser UI. - CVE-2022-1635: Use after free in Permission Prompts. - CVE-2022-1636: Use after free in Performance APIs. - CVE-2022-1637: Inappropriate implementation in Web Contents. - CVE-2022-1638: Heap buffer overflow in V8 Internationalization. - CVE-2022-1639: Use after free in ANGLE. - CVE-2022-1640: Use after free in Sharing. - CVE-2022-1641: Use after free in Web UI Diagnostics.	Olivier Tilloy		1 year ago
1669	releasing package chromium-browser version releasing package chromium-browser version 101.0.4951.54-0ubuntu0.18.04.1	Olivier Tilloy	101.0.4951.54-0ubuntu0.18.04.1	1 year ago
1668	* Upstream release: 101.0.4951.54 * Upstream release: 101.0.4951.54	Olivier Tilloy		1 year ago
1667	releasing package chromium-browser version releasing package chromium-browser version 101.0.4951.41-0ubuntu0.18.04.1	Olivier Tilloy	101.0.4951.41-0ubuntu0.18.04.1	2 years ago

Older »