-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 Dec 2017 15:26:02 +0000 Source: chromium-browser Binary: chromium chromium-l10n chromium-shell chromium-widevine chromium-driver chromedriver Architecture: armhf Version: 63.0.3239.84-1~deb9u1 Distribution: stretch-security Urgency: medium Maintainer: armel Build Daemon (arnold) Changed-By: Michael Gilbert Description: chromedriver - web browser - WebDriver support transitional package chromium - web browser chromium-driver - web browser - WebDriver support chromium-l10n - web browser - language packs chromium-shell - web browser - minimal shell chromium-widevine - web browser - widevine content decryption support Changes: chromium-browser (63.0.3239.84-1~deb9u1) stretch-security; urgency=medium . * New upstream stable release. - CVE-2017-15407: Out of bounds write in QUIC. Reported by Ned Williamson - CVE-2017-15408: Heap buffer overflow in PDFium. Reported by Ke Liu - CVE-2017-15409: Out of bounds write in Skia. Reported by Anonymous - CVE-2017-15410: Use after free in PDFium. Reported by Luật Nguyễn - CVE-2017-15411: Use after free in PDFium. Reported by Luật Nguyễn - CVE-2017-15413: Type confusion in WebAssembly. Reported by Gaurav Dewan - CVE-2017-15415: Pointer information disclosure in IPC call. Reported by Viktor Brange - CVE-2017-15416: Out of bounds read in Blink. Reported by Ned Williamson - CVE-2017-15417: Cross origin information disclosure in Skia . Reported by Max May - CVE-2017-15418: Use of uninitialized value in Skia. Reported by Kushal Arvind Shah - CVE-2017-15419: Cross origin leak of redirect URL in Blink. Reported by Jun Kokatsu - CVE-2017-15420: URL spoofing in Omnibox. Reported by WenXu Wu - CVE-2017-15423: Issue with SPAKE implementation in BoringSSL. Reported by Greg Hudson - CVE-2017-15424: URL Spoof in Omnibox. Reported by Khalil Zhani - CVE-2017-15425: URL Spoof in Omnibox. Reported by xisigr - CVE-2017-15426: URL Spoof in Omnibox. Reported by WenXu Wu - CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox. Reported by Junaid Farhan Checksums-Sha1: e89dbf9720c90d9e53d4c73199715056657a6b56 123698 chromedriver_63.0.3239.84-1~deb9u1_armhf.deb 4f6b1450a94665a662ab49047eceb50feadcf0b4 21133 chromium-browser_63.0.3239.84-1~deb9u1_armhf.buildinfo 195c63f9582d4935f5d2cdb1957dd451b88334a8 8916326 chromium-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb 0b8f2a8eff595dc2e4d378843f3bb5902e5eaee4 539154 chromium-driver-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb fd2f4b7fe36934d640bb8f89005cee16d35d8910 2890112 chromium-driver_63.0.3239.84-1~deb9u1_armhf.deb 43c879288615723fbe25d730864063d7d1ae313a 5902002 chromium-shell-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb cc8eef7c895e37accd678f0217cbc2850d7d9e8c 17814034 chromium-shell_63.0.3239.84-1~deb9u1_armhf.deb 909e53a8dd447cfe4685711e4892cd66aa6ec244 144650 chromium-widevine_63.0.3239.84-1~deb9u1_armhf.deb 01aacec28e86da4d4afb9fdab53541f0a2264798 38254686 chromium_63.0.3239.84-1~deb9u1_armhf.deb Checksums-Sha256: 9d90033a85a05ed97d9fda0918d081fe1e20c71d800f3f83b4339fec2ef20a76 123698 chromedriver_63.0.3239.84-1~deb9u1_armhf.deb 8b6d04013445a3861db6da7757b37c1fe3e20eea62f50aa46e83f659e23e92c4 21133 chromium-browser_63.0.3239.84-1~deb9u1_armhf.buildinfo 63d551b3fc810bbb2dbd173c6c1c0e1ee70fb2ac3ec67b24bb67b22c29bd0f18 8916326 chromium-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb 4f8564c69e34553732a27d2ef335e5b358846c0aab0901ef8eb2cb7b00cf0f32 539154 chromium-driver-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb 3b908435b58de553f2c4731fc03c78f823a809178a13a37eab4aa7eccced9535 2890112 chromium-driver_63.0.3239.84-1~deb9u1_armhf.deb a58e722f1e5098e019376e94d79ee0884db7b8b419117aa007ebae0f98db9324 5902002 chromium-shell-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb d1c624ae5faea54ef0e7bd074ff4efa70ff944ca12a070be9948bd16fb95c0ed 17814034 chromium-shell_63.0.3239.84-1~deb9u1_armhf.deb e0ac2d062414d1ae2de1f8f96dff6a9fcbb313470d8cb2c56c4d1ff232cfcd87 144650 chromium-widevine_63.0.3239.84-1~deb9u1_armhf.deb 288fac631db809c1d0d7e704784701867f8ab9d7af3d86b549555d562531387e 38254686 chromium_63.0.3239.84-1~deb9u1_armhf.deb Files: f8dfca419f16350b04f741c24683faeb 123698 web optional chromedriver_63.0.3239.84-1~deb9u1_armhf.deb 219e10f1bcdcc269c6e7912ca6e0b6e8 21133 web optional chromium-browser_63.0.3239.84-1~deb9u1_armhf.buildinfo 08c32cbe17e4cca40980f243f8c984ed 8916326 debug extra chromium-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb dc9a4671a8e344a21a4c438145b5fc12 539154 debug extra chromium-driver-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb 9acb3e555d96f73786303c4c90a8b9fd 2890112 web optional chromium-driver_63.0.3239.84-1~deb9u1_armhf.deb 0ebb09e7e5dfc9cc3bf7a0dac630517c 5902002 debug extra chromium-shell-dbgsym_63.0.3239.84-1~deb9u1_armhf.deb ba06960527a188089e1fd4fa6a6d93db 17814034 web optional chromium-shell_63.0.3239.84-1~deb9u1_armhf.deb 0ead07e921d1a088b01c4ce757ccba89 144650 contrib/web optional chromium-widevine_63.0.3239.84-1~deb9u1_armhf.deb d628f4e0f8575e1ad1f44513822d777d 38254686 web optional chromium_63.0.3239.84-1~deb9u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZLsyj1ydjsujVKvuAnSzvPPClaEFAloulsUACgkQAnSzvPPC laFgvRAAm1lfTuigFZyClXHd9apwUS26JSA2iGUABtWE0WTboqA31SQ1HGX2GAap 9xghYeODgvUhcPyXmoRBmAs/9Mz4xFQp0UI9S1MrKq835tIfJaIl/5N8XBXfM61k U4yt2lCs4xQcQulvvpJt0gnc951NR4Kp/xugsH0skQe9oIXVxrYTmJkWO/RpA8bQ 8d1w4m/lBMCO3LN5CSJekwW9sI8BEULL+EP1H1gKbjjY5oATJmlb/nlxnyLsE1Eo 0oFwVHj/fkbv4BVIpx7XPbNvx3gIW74o2ASHivjuAdFI8RTtpuafSGGc0tBRToqy aHNzgr6sgT4cZT4zqCPgPm5AE+eb7+pYyUUOgxoOyjpYMqUSbm9xgW+GfdQ+HPPM RjFOAWanjxSCLglnxOa/jjW1JdRG6CyjSCHSf4JaD6cY9kbaMcVFEORCGYCKGkx/ WqRWUEqdXoNnJ2zeuJo0wmKLlfog+cp/0dGFUkahhzK2a1eayZJxpTcWKzXroMSj aNf7vg3Uo+W/AuExyBzNjWGXgHIdsCImhHFmMccu46cu5PDm1YNx1n5YzpwdfEFd l0fYuuPAz9RlXmheOwaKT9luSymxfp36SS2/CUbdVvwrRr+tOS1CyD2wjO66MC4J Kc2XTKaEwiqT/t5W/Q1aZGMy1+bNy7PCd6rHuyTKMabBmWBCg+0= =WWK2 -----END PGP SIGNATURE-----