~chromium-team/chromium-browser/utopic-working : changes

~chromium-team/chromium-browser/utopic-working » Changes from revision 1134

From Revision 1134 to 1115

Rev	Summary	Authors	Date
1134	Replace patch name. Replace patch name.	Chad MILLER	8 years ago
1133	debian/patches/gpu_default_disabled: Make GPU activation a (... debian/patches/gpu_default_disabled: Make GPU activation a (default off) preference instead of blacklisting.	Chad MILLER	8 years ago
1132	[Chad Miller] [Chad Miller] * Upstream release 43.0.2357.130: - CVE-2015-1266: Scheme validation error in WebUI. - CVE-2015-1268: Cross-origin bypass in Blink. - CVE-2015-1267: Cross-origin bypass in Blink. - CVE-2015-1269: Normalization error in HSTS/HPKP preload list. * debian/tests/smoketest-actual: Capture web-server log so we can get port and test retreival. Fixes autopkgtest failures. * debian/patches/widevine-other-locations: Search Chrome install location to find widevine plugins. * Use new Flash plugin name in apport collector. [Iain Lane] * Test fixes. * debian/tests/control: Add a test-dep on python3-httplib2 and dbus-x11 which are required by the testsuite. * debian/tests/smoketest-actual: Redirect webserver-out and webserver-err so that the test can read these.	Chad MILLER	8 years ago
1131	Remove references to staleness check file. Remove references to staleness check file.	Chad MILLER	8 years ago
1130	debian/control, debian/chromium-browser.sh.in: Prompt nothin... debian/control, debian/chromium-browser.sh.in: Prompt nothing about Flash plugin. Send Help clicks to Wiki instead.	Chad MILLER	8 years ago
1129	* Upstream release 43.0.2357.81. * Upstream release 43.0.2357.81. - "Icons not displaying properly on Linux" (LP: #1449063)	Chad MILLER	8 years ago
1128	* debian/chromium-browser.sh.in: Add --verbose to get loggin... * debian/chromium-browser.sh.in: Add --verbose to get logging info. * debian/patches/{notifications-nicer,mir-support}: disable unnecessary patches.	Chad MILLER	8 years ago
1127	debian/patches/enable_vaapi_on_linux.diff: Temporarily disab... debian/patches/enable_vaapi_on_linux.diff: Temporarily disable patch until ARM works.	Chad MILLER	8 years ago
1126	* Upstream release 43.0.2357.65: * Upstream release 43.0.2357.65: - CVE-2015-1252: Sandbox escape in Chrome. - CVE-2015-1253: Cross-origin bypass in DOM. - CVE-2015-1254: Cross-origin bypass in Editing. - CVE-2015-1255: Use-after-free in WebAudio. - CVE-2015-1256: Use-after-free in SVG. - CVE-2015-1251: Use-after-free in Speech. - CVE-2015-1257: Container-overflow in SVG. - CVE-2015-1258: Negative-size parameter in Libvpx. - CVE-2015-1259: Uninitialized value in PDFium. - CVE-2015-1260: Use-after-free in WebRTC. - CVE-2015-1261: URL bar spoofing. - CVE-2015-1262: Uninitialized value in Blink. - CVE-2015-1263: Insecure download of spellcheck dictionary. - CVE-2015-1264: Cross-site scripting in bookmarks. - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives. - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21). * debian/patches/display-scaling-report-hardware-info: removed, unnecessary. * debian/patches/coordinate-space-map: removed, unnecessary.	Chad MILLER	8 years ago
1125	* debian/chromium-browser.sh.in: Presence of old Flash is no... * debian/chromium-browser.sh.in: Presence of old Flash is not a reason to suggest new plugin. If new plugin exists, be silent. Do not rely on new plugin to Conflicts and remove all the old bad ones. * debian/patches/enable_vaapi_on_linux.diff: Enable video acceleration library. * debian/patches/fix_building_widevinecdm_with_chromium.patch: If exterior-sourced widevine library exists at run-time, use it.	Chad MILLER	8 years ago
1124	wily created. bump version. wily created. bump version.	Chad MILLER	8 years ago
1123	debian/chromium-browser-etc-customizations-flash-staleness: ... debian/chromium-browser-etc-customizations-flash-staleness: Pass only one flash-player start param to chromium. Prefer the new one.	Chad MILLER	8 years ago
1122	* Upstream release 42.0.2311.135: * Upstream release 42.0.2311.135: - CVE-2015-1243: Use-after-free in DOM. - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives. * debian/patches/all_gpus_blacklisted: AMD, Intel, and NVIDIA cards all contribute to the largest crash report in errors.ubuntu.com. Let's disable GPUs for now.	Chad MILLER	8 years ago
1121	debian/chromium-browser.sh.in, debian/chromium-browser.sh.in, debian/chromium-browser-etc-customizations-flash-staleness: Ask sudo users to update flash.	Chad MILLER	8 years ago
1120	debian/patches/arm-neon.patch: exclude new armv7=neon assump... debian/patches/arm-neon.patch: exclude new armv7=neon assumptions.	Chad MILLER	8 years ago
1119	* Upstream release 42.0.2311.90: * Upstream release 42.0.2311.90: - CVE-2015-1235: Cross-origin-bypass in HTML parser. - CVE-2015-1236: Cross-origin-bypass in Blink. - CVE-2015-1237: Use-after-free in IPC. - CVE-2015-1238: Out-of-bounds write in Skia. - CVE-2015-1240: Out-of-bounds read in WebGL. - CVE-2015-1241: Tap-Jacking. - CVE-2015-1242: Type confusion in V8. - CVE-2015-1244: HSTS bypass in WebSockets. - CVE-2015-1245: Use-after-free in PDFium. - CVE-2015-1247: Scheme issues in OpenSearch. - CVE-2015-1248: SafeBrowsing bypass. * Upstream release 41.0.2272.118: - CVE-2015-1233: A special thanks to Anonymous for a combination of V8, Gamepad and IPC bugs that can lead to remote code execution outside of the sandbox. - CVE-2015-1234: Buffer overflow via race condition in GPU. * Change assumed X-resource DPI from 108 to 96. That's closer to 100. * Autopkgtest now depends on x11-apps to get xwd. Make smoketest exit val nonzero on failure. * debian/generate-snappy.mk, debian/rules: Start to generate snap packages if available. * debian/chromium-browser.sh.in: Test for /etc/ dir before listing it. * debian/chromium-browser-etc-customizations-flash-staleness: Ask sudo users to update flash player.	Chad MILLER	9 years ago
1118	Refresh ARM neon patch to avoid neon-specific function linki... Refresh ARM neon patch to avoid neon-specific function linking errors.	Chad MILLER	9 years ago
1117	Don't need explicit gn to build any more. Don't need explicit gn to build any more.	Chad MILLER	9 years ago
1116	* Upstream release 41.0.2272.76: * Upstream release 41.0.2272.76: - CVE-2015-1212: Out-of-bounds write in media. - CVE-2015-1213: Out-of-bounds write in skia filters. - CVE-2015-1214: Out-of-bounds write in skia filters. - CVE-2015-1215: Out-of-bounds write in skia filters. - CVE-2015-1216: Use-after-free in v8 bindings. - CVE-2015-1217: Type confusion in v8 bindings. - CVE-2015-1218: Use-after-free in dom. - CVE-2015-1219: Integer overflow in webgl. - CVE-2015-1220: Use-after-free in gif decoder. - CVE-2015-1221: Use-after-free in web databases. - CVE-2015-1222: Use-after-free in service workers. - CVE-2015-1223: Use-after-free in dom. - CVE-2015-1230: Type confusion in v8. - CVE-2015-1224: Out-of-bounds read in vpxdecoder. - CVE-2015-1225: Out-of-bounds read in pdfium. - CVE-2015-1226: Validation issue in debugger. - CVE-2015-1227: Uninitialized value in blink. - CVE-2015-1228: Uninitialized value in rendering. - CVE-2015-1229: Cookie injection via proxies. - CVE-2015-1231: Various fixes from internal audits, fuzzing and other initiatives.	Chad MILLER	9 years ago
1115	from apport utility. Add CPU usage information. Add bargraph... from apport utility. Add CPU usage information. Add bargraph of "running" processes, so bugpatterns can sort away busy machines, and then classify remainder according to procline "gpu-vendor=id" param. debian/patches/gpu-hangs: Extend the GPU watchdog to 30 seconds. If the GPU is really hung, the extra time matters little. It's probably not recoverable. Reviews of apport reports find no common thread among GPUs vendors. Notes at crbug.com/221882 suggest busy CPUs could trigger hang. Will additionally use apport bugpatterns to comb dmesg for actual crashes and route to specific GPU-driver bugs.	Chad MILLER	9 years ago

Older »