- Committer: Micah Gersten
- Date: 2012-04-10 00:09:51 UTC
- Revision ID: micahg@ubuntu.com-20120410000951-vc98fh8eiohd5nli
* New upstream release from the Stable Channel (LP: #977502)
- black screen on Hybrid Graphics system with GPU accelerated compositing
enabled (Issue: 117371)
- CSS not applied to <content> element (Issue: 114667)
- Regression rendering a div with background gradient and borders
(Issue: 113726)
- Canvas 2D line drawing bug with GPU acceleration (Issue: 121285)
- Multiple crashes (Issues: 72235, 116825 and 92998)
- Pop-up dialog is at wrong position (Issue: 116045)
- HTML Canvas patterns are broken if you change the transformation matrix
(Issue: 112165)
- SSL interstitial error "proceed anyway" / "back to safety" buttons don't
work (Issue: 119252)
This release fixes the following security issues:
- [106577] Medium CVE-2011-3066: Out-of-bounds read in Skia clipping.
Credit to miaubiz.
- [117583] Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to
Sergey Glazunov.
- [117698] High CVE-2011-3068: Use-after-free in run-in handling. Credit to
miaubiz.
- [117728] High CVE-2011-3069: Use-after-free in line box handling. Credit
to miaubiz.
- [118185] High CVE-2011-3070: Use-after-free in v8 bindings. Credit to
Google Chrome Security Team (SkyLined).
- [118273] High CVE-2011-3071: Use-after-free in HTMLMediaElement. Credit
to pa_kt, reporting through HP TippingPoint ZDI (ZDI-CAN-1528).
- [118467] Low CVE-2011-3072: Cross-origin violation parenting pop-up
window. Credit to Sergey Glazunov.
- [118593] High CVE-2011-3073: Use-after-free in SVG resource handling.
Credit to Arthur Gerkis.
- [119281] Medium CVE-2011-3074: Use-after-free in media handling. Credit
to Sławomir Błażek.
- [119525] High CVE-2011-3075: Use-after-free applying style command.
Credit to miaubiz.
- [120037] High CVE-2011-3076: Use-after-free in focus handling. Credit to
miaubiz.
- [120189] Medium CVE-2011-3077: Read-after-free in script bindings. Credit
to Google Chrome Security Team (Inferno).
- black screen on Hybrid Graphics system with GPU accelerated compositing
enabled (Issue: 117371)
- CSS not applied to <content> element (Issue: 114667)
- Regression rendering a div with background gradient and borders
(Issue: 113726)
- Canvas 2D line drawing bug with GPU acceleration (Issue: 121285)
- Multiple crashes (Issues: 72235, 116825 and 92998)
- Pop-up dialog is at wrong position (Issue: 116045)
- HTML Canvas patterns are broken if you change the transformation matrix
(Issue: 112165)
- SSL interstitial error "proceed anyway" / "back to safety" buttons don't
work (Issue: 119252)
This release fixes the following security issues:
- [106577] Medium CVE-2011-3066: Out-of-bounds read in Skia clipping.
Credit to miaubiz.
- [117583] Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to
Sergey Glazunov.
- [117698] High CVE-2011-3068: Use-after-free in run-in handling. Credit to
miaubiz.
- [117728] High CVE-2011-3069: Use-after-free in line box handling. Credit
to miaubiz.
- [118185] High CVE-2011-3070: Use-after-free in v8 bindings. Credit to
Google Chrome Security Team (SkyLined).
- [118273] High CVE-2011-3071: Use-after-free in HTMLMediaElement. Credit
to pa_kt, reporting through HP TippingPoint ZDI (ZDI-CAN-1528).
- [118467] Low CVE-2011-3072: Cross-origin violation parenting pop-up
window. Credit to Sergey Glazunov.
- [118593] High CVE-2011-3073: Use-after-free in SVG resource handling.
Credit to Arthur Gerkis.
- [119281] Medium CVE-2011-3074: Use-after-free in media handling. Credit
to Sławomir Błażek.
- [119525] High CVE-2011-3075: Use-after-free applying style command.
Credit to miaubiz.
- [120037] High CVE-2011-3076: Use-after-free in focus handling. Credit to
miaubiz.
- [120189] Medium CVE-2011-3077: Read-after-free in script bindings. Credit
to Google Chrome Security Team (Inferno).
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 ..
|
|||||||
LICENSE.Apache (v2.0) |
423 | 14 years ago | Alexander Sack | * commit Apache, BSD, global BSD-style Chromium an | 67 bytes |
|
|
|
LICENSE.BSD (2 clause) |
423 | 14 years ago | Alexander Sack | * commit Apache, BSD, global BSD-style Chromium an | 1.3 KB |
|
|
|
LICENSE.BSL (v1) |
438 | 14 years ago | Alexander Sack | * remove trailing empty lines from licenses in deb | 1.3 KB |
|
|
|
LICENSE.global BSD-style Chromium |
438 | 14 years ago | Alexander Sack | * remove trailing empty lines from licenses in deb | 1.4 KB |
|
|
|
LICENSE.global BSD-style libjingle |
438 | 14 years ago | Alexander Sack | * remove trailing empty lines from licenses in deb | 1.4 KB |
|
|
|
LICENSE.GPL-2-or-later |
396.1.45 | 14 years ago | Fabien Tassin | * Merge with chromium-browser.head #577 | 817 bytes |
|
|
|
LICENSE.GPL-3-or-later |
437 | 14 years ago | Alexander Sack | add GPL-3-or-later and SGI Free Software B License | 694 bytes |
|
|
|
LICENSE.harfbuzz-License |
456 | 14 years ago | Alexander Sack | * remove icu-license from harzbuff-license snippet | 962 bytes |
|
|
|
LICENSE.ICU-License |
425 | 14 years ago | Alexander Sack | * add ICU-License - add debian/licenses/LICENSE. | 1.4 KB |
|
|
|
LICENSE.LGPL-2.0-or-later |
438 | 14 years ago | Alexander Sack | * remove trailing empty lines from licenses in deb | 833 bytes |
|
|
|
LICENSE.LGPL-2.1-or-later |
438 | 14 years ago | Alexander Sack | * remove trailing empty lines from licenses in deb | 787 bytes |
|
|
|
LICENSE.MPL-1.1 |
457 | 14 years ago | Alexander Sack | * add MPL 1.1 license - add debian/licenses/LICE | 25.3 KB |
|
|
|
LICENSE.Paul Hsieh's Public Domain Option |
472 | 14 years ago | Alexander Sack | * address archive-admin comments: + add "Paul Hs | 508 bytes |
|
|
|
LICENSE.SGI Free Software B License (v2.0) |
437 | 14 years ago | Alexander Sack | add GPL-3-or-later and SGI Free Software B License | 1.5 KB |
|
|