← Back to branch summary

~chromium-team/chromium-browser/focal-stable

« back to all changes in this revision

Viewing changes to debian/chromium-browser.lintian-overrides

  • Committer: Olivier Tilloy
  • Date: 2019-06-12 07:56:52 UTC
  • mfrom: (1494.1.4 eoan-snap)
  • Revision ID: olivier.tilloy@canonical.com-20190612075652-2mej8weep7syq5j9
* Upstream release: 75.0.3770.80
  - CVE-2019-5828: Use after free in ServiceWorker.
  - CVE-2019-5829: Use after free in Download Manager.
  - CVE-2019-5830: Incorrectly credentialed requests in CORS.
  - CVE-2019-5831: Incorrect map processing in V8.
  - CVE-2019-5832: Incorrect CORS handling in XHR.
  - CVE-2019-5833: Inconsistent security UI placement.
  - CVE-2019-5834: URL spoof in Omnibox on iOS.
  - CVE-2019-5835: Out of bounds read in Swiftshader.
  - CVE-2019-5836: Heap buffer overflow in Angle.
  - CVE-2019-5837: Cross-origin resources size disclosure in Appcache.
  - CVE-2019-5838: Overly permissive tab access in Extensions.
  - CVE-2019-5839: Incorrect handling of certain code points in Blink.
  - CVE-2019-5840: Popup blocker bypass.
* Install the chromium snap in place of the debian packages, and make the wrapper script rename the desktop file in well-known desktop launchers (currently GNOME Shell and Unity)

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/chromium-browser.lintian-overrides
1
 
# Weird security policy for Ubuntu, that upstream moves so quickly that 1) bugs
2
 
# are fixed in embedded libraries quickly, and 2) using system libraries would
3
 
# be too difficult to test.
4
 
embedded-library
5
 
 
6
 
# Small, vetted binary that's needed to drop capabilities from the
7
 
# network-facing code paths.
8
 
setuid-binary usr/lib/chromium-browser/chrome-sandbox 4755 root/root
 
1
# manpages
 
2
chromium-browser: binary-without-manpage usr/bin/chromium-browser