-------------------------------------------------------------------
Wed Dec 26 12:36:13 UTC 2012 - tittiatcoke@gmail.com
- Update to 26.0.1371
* Bug and stability fixes
-------------------------------------------------------------------
Thu Dec 20 13:25:14 UTC 2012 - tittiatcoke@gmail.com
- Update to 26.0.1367
* Bug and stability fixes
-------------------------------------------------------------------
Sat Dec 15 13:32:15 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1362
* Security fixes (bnc#794075):
- CVE-2012-5139: Use-after-free with visibility events
- CVE-2012-5140: Use-after-free in URL loader
- CVE-2012-5141: Limit Chromoting client plug-in instantiation.
- CVE-2012-5142: Crash in history navigation.
- CVE-2012-5143: Integer overflow in PPAPI image buffers
- CVE-2012-5144: Stack corruption in AAC decoding
-------------------------------------------------------------------
Thu Dec 6 10:06:51 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1352
* Fixed garbled header and footer text in print preview.
[Issue: 152893]
* Fixed extension action badges with long text. [Issue: 160069]
* Disable find if constrained window is shown. [Issue: 156969]
* Enable fullscreen for apps windows. [Issue: 161246]
* Fixed broken profile with system-wide installation and
UserDataDir & DiskCacheDir policy. [Issue: 161336]
* Fixed stability crashes like 158747, 159437, 149139, 160914,
160401, 161858, 158747, 156878
* Fixed graphical corruption in Dust. [Issue: 155258]
* Fixed scrolling issue. [Issue: 163553]
-------------------------------------------------------------------
Fri Nov 30 17:15:39 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1343
* Security Fixes (bnc#791234 and bnc#792154):
- CVE-2012-5131: Corrupt rendering in the Apple OSX driver for
Intel GPUs
- CVE-2012-5133: Use-after-free in SVG filters.
- CVE-2012-5130: Out-of-bounds read in Skia
- CVE-2012-5132: Browser crash with chunked encoding
- CVE-2012-5134: Buffer underflow in libxml.
- CVE-2012-5135: Use-after-free with printing.
- CVE-2012-5136: Bad cast in input element handling.
- CVE-2012-5138: Incorrect file path handling
- CVE-2012-5137: Use-after-free in media source handling
- Correct build so that proprietary codecs can be used when
the chromium-ffmpeg package is installed
-------------------------------------------------------------------
Sun Nov 25 12:50:28 UTC 2012 - tittiatcoke@gmail.com
- Add a configuration file (/etc/default/chromium) where we can
indicate flags for the chromium-browser.
-------------------------------------------------------------------
Sat Nov 24 20:00:51 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1335
* {gtk} Fixed selection renders white text on white
background in apps. (Issue: 158422)
* Fixed translate infobar button to show selected language.
(Issue: 155350)
* Fixed broken Arabic language. (Issue: 158978)
* Fixed pre-rendering if the preference is disabled at start up.
(Issue: 159393)
* Fixed JavaScript rendering issue. (Issue: 159655)
* No further indications in the ChangeLog
-------------------------------------------------------------------
Tue Nov 20 23:27:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1329
* No further indications in the ChangeLog
- Removed patch chomium-ffmpeg-no-pkgconfig.patch
- Building now internal libffmpegsumo.so based on the standard
chromium ffmpeg codecs
-------------------------------------------------------------------
Tue Nov 6 18:42:46 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1319
* No further indications in the Changelog
-------------------------------------------------------------------
Fri Oct 26 08:58:02 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1308
* Updated V8 - 3.14.5.0
* Bookmarks are now searched by their title while typing into
the omnibox with matching bookmarks being shown in the
autocomplete suggestions pop-down list. Matching is done by
prefix.
* Fixed chromium issues 155871, 154173, 155133.
-------------------------------------------------------------------
Tue Oct 16 12:41:55 UTC 2012 - coolo@suse.com
- add explicit buildrequire on libbz2-devel
-------------------------------------------------------------------
Sun Oct 7 11:28:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1290
* No further indications in the ChangeLog.
-------------------------------------------------------------------
Sun Sep 30 09:38:06 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1283
* Security Fixes (bnc#782257)
- High CVE-2012-2889: UXSS in frame handling
- High CVE-2012-2886: UXSS in v8 bindings.
- High CVE-2012-2881: DOM tree corruption with plug-ins.
- High CVE-2012-2876: Buffer overflow in SSE2 optimizations.
- High CVE-2012-2883: Out-of-bounds write in Skia.
- High CVE-2012-2887: Use-after-free in onclick handling.
- High CVE-2012-2888: Use-after-free in SVG text references.
- High CVE-2012-2894: Crash in graphics context handling.
- High CVE-2012-2896: Integer overflow in WebGL.
- Medium CVE-2012-2877: Browser crash with extensions
and modal dialogs
- Low CVE-2012-2879: DOM topology corruption.
- Medium CVE-2012-2884: Out-of-bounds read in Skia.
- High CVE-2012-2874: Out-of-bounds write in Skia.
- High CVE-2012-2878: Use-after-free in plug-in handling.
- Medium CVE-2012-2880: Race condition in plug-in paint buffer.
- High CVE-2012-2882: Wild pointer in OGG container handling.
- Medium CVE-2012-2885: Possible double free on exit.
- Low CVE-2012-2891: Address leak over IPC.
- Low CVE-2012-2892: Pop-up block bypass.
- High CVE-2012-2893: Double free in XSL transforms.
-------------------------------------------------------------------
Sat Sep 15 06:27:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1268
* Updated V8 - 3.13.6.0
* Updated WebKit - 537.10
* Make the new sandbox more robust when denying socket calls.
* Fix crashes (Issues 142388 and 146606)
-------------------------------------------------------------------
Fri Sep 7 15:49:57 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1259
* No further indications in the ChangeLog.
-------------------------------------------------------------------
Sun Sep 2 14:31:22 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1255
* Security Fixes (bnc#778005):
- Medium CVE-2012-2865: Out-of-bounds read in line breaking.
- High CVE-2012-2866: Bad cast with run-ins.
- Low CVE-2012-2867: Browser crash with SPDY.
- Medium CVE-2012-2868: Race condition with workers and XHR.
- High CVE-2012-2869: Avoid stale buffer in URL loading.
- Low CVE-2012-2870: Lower severity memory management issues
in XPath.
- High CVE-2012-2871: Bad cast in XSL transforms.
- Medium CVE-2012-2872: XSS in SSL interstitial.
-------------------------------------------------------------------
Wed Aug 29 19:19:31 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1249
* No longer building with system libraries. This caused issues
with high CPU utilization and a blank homescreen. Now the
in-source libraries are used.
-------------------------------------------------------------------
Sun Aug 19 08:32:45 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1240
* Duplex Printing defaults to Yes, which prints extra pages even
for a 1 page print out (Issue 138312).
* Print preview takes forever on Win XP (issue: 140044)
* Anti-DDoS inversion of logic (Issues: 141643, 141081)
* Projectmanager.com application causes Flash to hang
(Issue: 141018)
* An additional scroll bar appears at the right on many sites
(issue: 140239)
* Setting and unsetting display:none obliterates current scroll
position (issue: 140101)
- Utilize the patched zlib sources from Chromium in order to build
-------------------------------------------------------------------
Fri Aug 3 15:54:24 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1226
* Security Fixes (bnc#770821):
CVE-2012-2843: Use-after-free in layout height tracking
CVE-2012-2842: Use-after-free in counter handling
-------------------------------------------------------------------
Mon Jul 30 13:21:27 UTC 2012 - aj@suse.de
- Fix build with glibc 2.16 (struct siginfo is not exported anymore).
-------------------------------------------------------------------
Sun Jul 29 13:32:21 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1221
* Several crash fixes (Issues: 131310, 134574)
* Can't press Enter to save to PDF (Issue: 137690)
-------------------------------------------------------------------
Wed Jul 25 14:17:53 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1218
* New Connection Manager
* New Print UI.
* No further indications in the ChangeLog.
-------------------------------------------------------------------
Sun Jul 8 13:10:48 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1201
* No further indications in the ChangeLog.
- exclude ppc and ppc64. There is no v8 for ppc. (Update from
dvaleev@suse.com)
-------------------------------------------------------------------
Fri Jun 29 08:52:58 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1190
* Security Fixes:
* CVE-2012-2815: Leak of iframe fragment id
* CVE-2012-2816: Prevent sandboxed processes interfering with
each other
* CVE-2012-2817: Use-after-free in table section handling
* CVE-2012-2818: Use-after-free in counter layout
* CVE-2012-2819: Crash in texture handling
* CVE-2012-2820: Out-of-bounds read in SVG filter handling
* CVE-2012-2821: Autofill display problem
* CVE-2012-2823: Use-after-free in SVG resource handling
* CVE-2012-2826: Out-of-bounds read in texture conversion
* CVE-2012-2829: Use-after-free in first-letter handling
* CVE-2012-2830: Wild pointer in array value setting
* CVE-2012-2831: Use-after-free in SVG reference handling
* CVE-2012-2834: Integer overflow in Matroska container
* CVE-2012-2825: Wild read in XSL handling
* CVE-2012-2807: Integer overflows in libxml
* Fix update-alternatives within the spec-file
-------------------------------------------------------------------
Thu Jun 21 12:20:28 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1183
* Content settings for Cookies now also show protected storage
granted to hosted apps
* Chromoting client plugin correctly up-scales on when page-zoom
is >100%.
-------------------------------------------------------------------
Tue Jun 19 13:06:52 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1181
* Bugfixes.
* Remove obsolete patch
* Do not execute update-alternatives when building
-------------------------------------------------------------------
Fri Jun 15 12:19:24 UTC 2012 - coolo@suse.com
- fix update-alternative usage to fix build
-------------------------------------------------------------------
Thu May 31 08:27:09 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1158
* Bugfixes
* Gamepad API prototype http://www.w3.org/TR/gamepad/
available by default.
* TLS 1.1 is enabled by default.
-------------------------------------------------------------------
Sun May 20 16:40:03 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1145
* Fixed several issues around audio not playing with videos
* Crash Fixes
* Improvements to trackpad on Cr-48
* Security Fixes (bnc#762481)
- CVE-2011-3083: Browser crash with video + FTP
- CVE-2011-3084: Load links from internal pages in their
own process.
- CVE-2011-3085: UI corruption with long autofilled values
- CVE-2011-3086: Use-after-free with style element.
- CVE-2011-3087: Incorrect window navigation
- CVE-2011-3088: Out-of-bounds read in hairline drawing
- CVE-2011-3089: Use-after-free in table handling.
- CVE-2011-3090: Race condition with workers.
- CVE-2011-3091: Use-after-free with indexed DB
- CVE-2011-3092: Invalid write in v8 regex
- CVE-2011-3093: Out-of-bounds read in glyph handling
- CVE-2011-3094: Out-of-bounds read in Tibetan handling
- CVE-2011-3095: Out-of-bounds write in OGG container.
- CVE-2011-3096: Use-after-free in GTK omnibox handling.
- CVE-2011-3098: Bad search path for Windows Media Player
plug-in
- CVE-2011-3100: Out-of-bounds read drawing dash paths.
- CVE-2011-3101: Work around Linux Nvidia driver bug
- CVE-2011-3102: Off-by-one out-of-bounds write in libxml.
-------------------------------------------------------------------
Sun May 13 19:53:59 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1137
* Fixes crashes when manually typing in URL's
-------------------------------------------------------------------
Fri May 11 14:22:22 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1135.0
* Added patch for Sqlite which should resolve crashes when build
with GCC 4.7
* Fixes for rendering and stability
* Fixed about:inducebrowsercrashforrealz (Issue: 124843)
* Mouse over on apps/extensions makes place holder blank in
web store. (Issue: 125777)
* Security Fixes (bnc#760264):
- CVE-2011-3078: Use after free in floats handling.
- CVE-2012-1521: Use after free in xml parser.
- CVE-2011-3079: IPC validation failure.
- CVE-2011-3080: Race condition in sandbox IPC
- CVE-2011-3081: Use after free in floats handling.
-------------------------------------------------------------------
Sun Apr 29 15:38:00 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1123.0
-------------------------------------------------------------------
Fri Apr 27 09:54:43 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1119.0
Fixes
- Adjust spec-file to include two new resource files that are
required for the UI. (bnc#759381)
-------------------------------------------------------------------
Wed Apr 25 11:32:07 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1116.0
* Fixes and update to newer v8 version
-------------------------------------------------------------------
Thu Apr 19 09:12:44 UTC 2012 - tittiatcoke@gmail.com
- Added the ChromeDriver as a separate package. Normal users
will not require this as it is a standalone server for testing
webbrowsers
-------------------------------------------------------------------
Tue Apr 17 13:53:49 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1106.0
* Fixes issues with fonts (Issue: 108645).
* Enable the Chrome To Mobile page action for users with
compatible registered devices
* file: downloads allowed again
-------------------------------------------------------------------
Fri Apr 13 09:12:42 UTC 2012 - fcrozat@suse.com
- Use desktop_database macros at install time.
-------------------------------------------------------------------
Fri Apr 6 14:32:07 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1094.0
Fixes:
* Other Devices menu shows last update time for other sessions,
and allows sessions to be hidden using a context menu.
* Fix sync issue with sessions (open tabs) triggering an
unrecoverable error.
* Fixed Sync/Apps: NTP apps icons missing after sync.
[Issue: 117857]
* Fixed bookmarks drag-n-drop in Bookmark Manager.
[Issue: 118715]
Security Fixes:
* Medium CVE-2011-3066: Out-of-bounds read in Skia clipping.
* Medium CVE-2011-3067: Cross-origin iframe replacement.
* High CVE-2011-3068: Use-after-free in run-in handling.
* High CVE-2011-3069: Use-after-free in line box handling.
* High CVE-2011-3070: Use-after-free in v8 bindings.
* High CVE-2011-3071: Use-after-free in HTMLMediaElement.
* Low CVE-2011-3072: Cross-origin violation parenting pop-up
window.
* High CVE-2011-3073: Use-after-free in SVG resource handling.
* Medium CVE-2011-3074: Use-after-free in media handling.
* High CVE-2011-3075: Use-after-free applying style command.
* High CVE-2011-3076: Use-after-free in focus handling.
* Medium CVE-2011-3077: Read-after-free in script bindings.
-------------------------------------------------------------------
Tue Apr 3 06:51:49 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1090
Fixes:
* Fixed issue cannot add GMail app to Chrome. [Issue: 119975]
* Fixed theme and bookmarks bar notifications. [Issue: 117027]
* Fixed popup prompting permission for flash plugin.
[Issue: 120358]
Security Fixes:
* Medium CVE-2011-3058: Bad interaction possibly leading to
XSS in EUC-JP.
* Medium CVE-2011-3059: Out-of-bounds read in SVG text handling.
* Medium CVE-2011-3060: Out-of-bounds read in text fragment
handling.
* Medium CVE-2011-3061: SPDY proxy certificate checking error.
* High CVE-2011-3062: Off-by-one in OpenType Sanitizer.
* Low CVE-2011-3063: Validate navigation requests from the
renderer more carefully.
* High CVE-2011-3064: Use-after-free in SVG clipping.
* High CVE-2011-3065: Memory corruption in Skia.
* Medium CVE-2011-3057: Invalid read in v8.
-------------------------------------------------------------------
Sat Mar 24 06:40:10 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1079
Security Fixes (bnc#754456):
* High CVE-2011-3050: Use-after-free with first-letter handling
* High CVE-2011-3045: libpng integer issue from upstream
* High CVE-2011-3051: Use-after-free in CSS cross-fade handling
* High CVE-2011-3052: Memory corruption in WebGL canvas handling
* High CVE-2011-3053: Use-after-free in block splitting
* Low CVE-2011-3054: Apply additional isolations to webui
privileges
* Low CVE-2011-3055: Prompt in the browser native UI for unpacked
extension installation
* High CVE-2011-3056: Cross-origin violation with “magic iframe”.
* Low CVE-2011-3049: Extension web request API can interfere with
system requests
Other Fixes:
* The short-cut key for caps lock (Shift + Search) is disabled
when an accessibility screen reader is enabled
* Fixes an issue with files not being displayed in File Manager
when some file names contain UTF-8 characters (generally
accented characters)
* Fixed dialog boxes in settings. (Issue: 118031)
* Fixed flash videos turning white on mac when running with
--disable-composited-core-animation-plugins (Issue: 117916)
* Change to look for correctly sized favicon when multiple images
are provided. (Issue: 118275)
* Fixed issues - 116044, 117470, 117068, 117668, 118620
-------------------------------------------------------------------
Wed Mar 21 12:36:42 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1077
-------------------------------------------------------------------
Sun Mar 18 17:35:02 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1074
- Build Chromium on openSUSE > 12.1 with the gold linker
- Fix build issues with GCC 4.7
-------------------------------------------------------------------
Thu Mar 15 12:51:21 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1071
* Several fixes and improvements in the new Settings, Extensions,
and Help pages.
* Fixed the flashing when switched between composited and
non-composited mode. [Issue: 116603]
* Fixed stability issues 116913, 117217, 117347, 117081
-------------------------------------------------------------------
Sun Mar 11 08:01:15 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1066
* Fixed Chrome install/update resets Google search preferences
(Issue: 105390)
* Don't trigger accelerated compositing on 3D CSS when using
swiftshader (Issue: 116401)
* Fixed a GPU crash (Issue: 116096)
* More fixes for Back button frequently hangs (Issue: 93427)
* Bastion now works (Issue: 116285)
* Fixed Composited layer sorting irregularity with accelerated
canvas (Issue: 102943)
* Fixed Composited layer sorting irregularity with accelerated
canvas (Issue: 102943)
* Fixed Google Feedback causes render process to use too much
memory (Issue: 114489)
* Fixed after upgrade, some pages are rendered as blank
(Issue: 109888)
* Fixed Pasting text into a single-line text field shouldn't
keep literal newlines (Issue: 106551)
- Security Fixes:
* Critical CVE-2011-3047: Errant plug-in load and GPU process
memory corruption
* Critical CVE-2011-3046: UXSS and bad history navigation.
-------------------------------------------------------------------
Mon Mar 5 20:53:06 UTC 2012 - vdziewiecki@suse.com
- add Provides: browser(npapi) FATE#313084
-------------------------------------------------------------------
Sat Mar 3 16:55:15 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1060
* Fixed NTP signed in state is missing (Issue: 112676)
* Fixed gmail seems to redraw itself (all white) occasionally
(Issue: 111263)
* Focus "OK" button on Javascript dialogs (Issue: 111015)
* Fixed Back button frequently hangs (Issue: 93427)
* Increase the buffer size to fix muted playback rate
(Issue: 108239)
* Fixed Empty span with line-height renders with non-zero height
(Issue: 109811)
* Marked the Certum Trusted Network CA as an issuer of
extended-validation (EV) certificates.
* Fixed importing of bookmarks, history, etc. from Firefox 10+.
* Fixed issues - 114001, 110785, 114168, 114598, 111663, 113636,
112676
* Fixed several crashes (Issues: 111376, 108688, 114391)
* Fixed Firefox browser in Import Bookmarks and Settings
drop-down (Issue: 114476)
* Sync: Sessions aren't associating pre-existing tabs
(Issue: 113319)
* Fixed All "Extensions" make an entry under the "NTP Apps"
page (Issue: 113672)
+ Security Fixes (bnc#750407):
* High CVE-2011-3031: Use-after-free in v8 element wrapper.
* High CVE-2011-3032: Use-after-free in SVG value handling.
* High CVE-2011-3033: Buffer overflow in the Skia drawing library.
* High CVE-2011-3034: Use-after-free in SVG document handling.
* High CVE-2011-3035: Use-after-free in SVG use handling.
* High CVE-2011-3036: Bad cast in line box handling.
* High CVE-2011-3037: Bad casts in anonymous block splitting.
* High CVE-2011-3038: Use-after-free in multi-column handling.
* High CVE-2011-3039: Use-after-free in quote handling.
* High CVE-2011-3040: Out-of-bounds read in text handling.
* High CVE-2011-3041: Use-after-free in class attribute handling.
* High CVE-2011-3042: Use-after-free in table section handling.
* High CVE-2011-3043: Use-after-free in flexbox with floats.
* High CVE-2011-3044: Use-after-free with SVG animation elements.
- Remove the external ffmepg headers and start using the ones
delivered with Chromium. Changes to Chromium are no longer in line
with any ffmpeg version :-(. So we can only use the Chromium
ffmpeg headers.
-------------------------------------------------------------------
Mon Feb 20 14:39:23 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1046
* Security updates
+ CVE-2011-3015: Integer overflows in PDF codecs.
+ CVE-2011-3016: Read-after-free with counter nodes.
+ CVE-2011-3017: Possible use-after-free in database handling.
+ CVE-2011-3018: Heap overflow in path rendering.
+ CVE-2011-3019: Heap buffer overflow in MKV handling.
+ CVE-2011-3020: Native client validator error.
+ CVE-2011-3021: Use-after-free in subframe loading.
+ CVE-2011-3022: Inappropriate use of http for translation script.
+ CVE-2011-3023: Use-after-free with drag and drop.
+ CVE-2011-3024: Browser crash with empty x509 certificate.
+ CVE-2011-3025: Out-of-bounds read in h.264 parsing.
+ CVE-2011-3026: Integer overflow / truncation in libpng.
+ CVE-2011-3027: Bad cast in column handling.
-------------------------------------------------------------------
Wed Feb 15 07:40:59 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1042
* Make speech input bubble borders close with the bubble
[Issue: 112194]
* Fixed stability issues
[Issues: 113531, 113492, 113654, 113546, 113847, 114011]
* Use Google’s online spellchecker to identify misspelled words
as well as provide suggestions, for pasted text only.
* Fix: open incognito windows at exit created extra normal
windows when the session was restored
* When translating a page, get the code and translation via HTTPS
-------------------------------------------------------------------
Fri Feb 10 05:36:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1037
* Fix crashing timing bug where panel animates after its closed
(issue#111120)
* Remove patch to build with newer glib version. This was merged
upstream
* Added option to disable building with gold for x86_64. Used
linker option "--icf=none" is not supported yet.
-------------------------------------------------------------------
Mon Feb 6 10:45:25 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1031
* Block plugins for platform apps
To block plugins a new content settings has been added, with
the highest priority (i.e. at the front of the list). This
could be used down the track to hang off more platform app
specific stuff.
* Remove unconditional -msse3 -mssse3 CFLAGS from media.gyp
(issue#107532)
* Refactoring of Settings page
* Other bugfixes
* Security Fixes:
CVE-2011-3953: Avoid clipboard monitoring after paste event.
CVE-2011-3954: Crash with excessive database usage.
CVE-2011-3955: Crash aborting an IndexDB transaction
CVE-2011-3956: Incorrect handling of sandboxed origins inside
extensions
CVE-2011-3957: Use-after-free in PDF garbage collection
CVE-2011-3958: Bad casts with column spans
CVE-2011-3959: Buffer overflow in locale handling
CVE-2011-3960: Out-of-bounds read in audio decoding
CVE-2011-3961: Race condition after crash of utility process
CVE-2011-3962: Out-of-bounds read in path clipping
CVE-2011-3963: Out-of-bounds read in PDF fax image handling
CVE-2011-3964: URL bar confusion after drag + drop
CVE-2011-3965: Crash in signature check
CVE-2011-3966: Use-after-free in stylesheet error handling
CVE-2011-3967: Crash with unusual certificate.
CVE-2011-3968: Use-after-free in CSS handling
CVE-2011-3969: Use-after-free in SVG layout.
CVE-2011-3970: Out-of-bounds read in libxslt
CVE-2011-3971: Use-after-free with mousemove events
CVE-2011-3972: Out-of-bounds read in shader translator
-------------------------------------------------------------------
Sun Jan 29 21:11:37 UTC 2012 - tittiatcoke@gmail.com
- Update to 18.0.1022
* Security fixes (bnc#743319)
+ CVE-2011-3924 Use-after-free vulnerability
+ CVE-2011-3925 Use-after-free vulnerability
+ CVE-2011-3926 Heap-based buffer overflow in the tree builder
+ CVE-2011-3927 Skia does not perform all required
initialization of values
+ CVE-2011-3928 Use-after-free vulnerability
* Compile the chrome_sandbox binary with -fPIE flags
-------------------------------------------------------------------
Mon Jan 23 09:44:42 UTC 2012 - tittiatcoke@gmail.com
- Update to 18.0.1017
* Security Issues fixed (bnc#740493)
+ CVE-2011-3921 Use-after-free in animation frames
+ CVE-2011-3919 Heap-buffer-overflow in libxml
+ CVE-2011-3922 Stack-buffer-overflow in glyph handling
-------------------------------------------------------------------
Sat Dec 31 22:29:20 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.992
* Delay some extension startup until after first run import.
(issue 108286)
* Add function support for Sleep with TimeDelta input.
(issue 108171)
* Make webstore installs work when the Downloads folder is missing.
(issue 108812)
* Disable GL_EXT_texture_storage support in Linux. (issue 107782)
-------------------------------------------------------------------
Wed Dec 28 12:00:11 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.985
+ Webkit layout:
* Suppress a leak in http/tests/appcache/reload.html
(issue 108621)
* Suppress a leak in xmlhttprequest/workers/referer.html
(issue 108622)
* Extend the suppression for uninit value in
fast/forms/input-text-paste-maxlength.html (issue 106183)
* Suppress memory leaks in
fast/files/workers/worker-read-blob-async.html
(issue 108624)
* Suppress a leak in
websocket/tests/hybi/workers/receive-arraybuffer.html
(issue 108627)
* Suppress a leak in
http/tests/xmlhttprequest/workers/methods-async.html
(issue 108628)
+ Set opaque on the WebMediaPlayerClient based on the decoder
-------------------------------------------------------------------
Mon Dec 19 06:41:16 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.975
+ Updating extensions code to use UTF16. (issue#71980)
+ Assign F5 to cycle forward (issue#107417)
+ [Sync] Add NOTREACHED for empty passphrase (issue#104189)
+ Add libudev as build-dependency (issue#79050)
+ Enable mnemonic and bookmark folder key activation on menu
(issue#107869)
- Removed conflict with xine-browser-plugins.
-------------------------------------------------------------------
Wed Dec 14 10:25:20 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.972
* Security issues fixed: (bnc#736716)
+ CVE-2011-3903: Out-of-bounds read in regex matching.
+ CVE-2011-3905: Out-of-bounds reads in libxml.
+ CVE-2011-3906: Out-of-bounds read in PDF parser.
+ CVE-2011-3907: URL bar spoofing with view-source.
+ CVE-2011-3908: Out-of-bounds read in SVG parsing.
+ CVE-2011-3909: [64-bit only] Memory corruption in CSS
property array.
+ CVE-2011-3910: Out-of-bounds read in YUV video frame
handling.
+ CVE-2011-3911: Out-of-bounds read in PDF.
+ CVE-2011-3912: Use-after-free in SVG filters.
+ CVE-2011-3914: Out-of-bounds write in v8 i18n handling
+ CVE-2011-3915: Buffer overflow in PDF font handling.
+ CVE-2011-3916: Out-of-bounds reads in PDF cross references.
+ CVE-2011-3917: Stack-buffer-overflow in FileWatcher.
+ CVE-2011-3904: Use-after-free in bidi handling.
* No longer build against the system libjpeg, but build against
the libjpeg that comes with Chromium to prevent graphics
issues
* Chromium for openSUSE:Factory now builds against libjpeg8
* Removed explicit -fPIC from the C-flags
-------------------------------------------------------------------
Sat Dec 10 18:51:39 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.968
+ Print preview: Disable the right context menu items in print
preview. (issue#106876,#106915)
+ Fix page zoom for plug-in documents (PDF, etc.)
(issue#106013,#106228)
+ ntp: track number of times a user switches pages in a single
session (issue#106575)
+