News for package chromium-browser

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 3.0 (quilt)
Source: chromium-browser
Binary: chromium, chromium-l10n, chromium-shell, chromium-widevine, chromium-driver, chromedriver
Architecture: i386 amd64 arm64 armhf all
Version: 70.0.3538.102-1~deb9u1
Maintainer: Debian Chromium Maintainers <pkg-chromium-maint@lists.alioth.debian.org>
Uploaders:  Michael Gilbert <mgilbert@debian.org>, Riku Voipio <riku.voipio@linaro.org>
Homepage: http://www.chromium.org/Home
Standards-Version: 3.9.8
Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-chromium/pkg-chromium.git
Vcs-Git: git://anonscm.debian.org/pkg-chromium/pkg-chromium.git
Build-Depends: debhelper (>= 9), python3, pkg-config, ninja-build, python-jinja2, ca-certificates, wget, flex, yasm, xvfb, wdiff, gperf, bison, valgrind, xz-utils, x11-apps, xfonts-base, libglewmx-dev, libgl1-mesa-dev, libglu1-mesa-dev, libegl1-mesa-dev, libgles2-mesa-dev, mesa-common-dev, libxt-dev, libre2-dev, libgbm-dev, libpng-dev, libxss-dev, libelf-dev, libvpx-dev, libpci-dev, libcap-dev, libdrm-dev, libicu-dev, libffi-dev, libkrb5-dev, libexif-dev, libflac-dev, libudev-dev, libopus-dev, libwebp-dev, libxtst-dev, libsrtp-dev, libjpeg-dev, libxml2-dev, libgtk-3-dev, libgtk2.0-dev, libxslt1-dev, libpulse-dev, libpam0g-dev, libsnappy-dev, libavutil-dev, libavcodec-dev (>= 7:3.0), libavformat-dev, libglib2.0-dev, libasound2-dev, libsqlite3-dev, libjsoncpp-dev, libspeechd-dev (>= 0.8.4), libminizip-dev, libhunspell-dev, libharfbuzz-dev (>= 1.2.7), libusb-1.0-0-dev, libopenjp2-7-dev, libmodpbase64-dev, libgnome-keyring-dev, libnss3-dev (>= 3.12.3), libnspr4-dev (>= 2:4.9), libcups2-dev (>= 1.5.0), libevent-dev (>= 1.4.13), libjs-jquery, libjs-excanvas, libjs-jquery-flot, libgcrypt20-dev, fonts-ipafont-gothic, fonts-ipafont-mincho
Package-List:
 chromedriver deb web optional arch=i386,amd64,arm64,armhf
 chromium deb web optional arch=i386,amd64,arm64,armhf
 chromium-driver deb web optional arch=i386,amd64,arm64,armhf
 chromium-l10n deb localization optional arch=all
 chromium-shell deb web optional arch=i386,amd64,arm64,armhf
 chromium-widevine deb contrib/web optional arch=i386,amd64,arm64,armhf
Checksums-Sha1:
 008a16c3e976287be3285010d73f0fb49f1c86b6 277382132 chromium-browser_70.0.3538.102.orig.tar.xz
 67e3e2ae72b8de5a6c9fcd8bdc61dcb26caad826 159076 chromium-browser_70.0.3538.102-1~deb9u1.debian.tar.xz
Checksums-Sha256:
 b5c812e7c0a817b1fd8f33f77084d17380da26f0dcfb444d5b01198acdf2cc5a 277382132 chromium-browser_70.0.3538.102.orig.tar.xz
 1334f6e36b07e1dd201d30a16513e0b80990bc03fb67767aaaab9211f486fa64 159076 chromium-browser_70.0.3538.102-1~deb9u1.debian.tar.xz
Files:
 61e0175ce45f88627f584eeffdaac5ad 277382132 chromium-browser_70.0.3538.102.orig.tar.xz
 31a8bf5a541a45c0a5695a5e3f02a0da 159076 chromium-browser_70.0.3538.102-1~deb9u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=ofh4
-----END PGP SIGNATURE-----

<span id="changes">Changes:</span>
chromium-browser (70.0.3538.102-1~deb9u1) stretch-security; urgency=medium

  * New upstream security release.
    - CVE-2018-17478: Out of bounds memory access in V8.  Reported by
      cloudfuzzer
  * Eliminate unintended dependency on gconf-service (closes: #913926).
  * Restore arm64 crashpad patch mistakenly dropped in the previous upload.

 -- Michael Gilbert <mgilbert@debian.org>  Tue, 13 Nov 2018 00:12:43 +0000