desktop-packages team mailing list archive

[Launchpad Bug Tracker <1490237@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package chromium-browser -
45.0.2454.85-0ubuntu0.15.04.1.1181

---------------
chromium-browser (45.0.2454.85-0ubuntu0.15.04.1.1181) vivid-security; urgency=medium

  * Upstream release 45.0.2454.85:
    - CVE-2015-1291: Cross-origin bypass in DOM.
    - CVE-2015-1292: Cross-origin bypass in ServiceWorker.
    - CVE-2015-1293: Cross-origin bypass in DOM.
    - CVE-2015-1294: Use-after-free in Skia.
    - CVE-2015-1295: Use-after-free in Printing.
    - CVE-2015-1296: Character spoofing in omnibox.
    - CVE-2015-1297: Permission scoping error in WebRequest.
    - CVE-2015-1298: URL validation error in extensions.
    - CVE-2015-1299: Use-after-free in Blink.
    - CVE-2015-1300: Information leak in Blink.
    - CVE-2015-1301: Various fixes from internal audits, fuzzing and other
      initiatives.
  * debian/patches/search-credit.patch: Don't add GET param if search URL
    doesn't already use them. (LP: #1490237)
  * debian/source/lintian-overrides: Ignore new binaries in orig tar.
  * debian/patches/gpu_default_disabled: No longer disable GPU rendering by
    default.
  * debian/patches/disable-sse2: SSE exclusion is smarter now. Re-include.

 -- Chad MILLER <chad.miller@xxxxxxxxxxxxx>  Mon, 14 Sep 2015 20:11:00
-0400

** Changed in: chromium-browser (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1291

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1292

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1293

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1294

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1295

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1296

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1297

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1298

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1299

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1300

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-1301

** Changed in: chromium-browser (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1490237

Title:
  Google image search not working

Status in chromium-browser package in Ubuntu:
  Fix Released

Bug description:
  Ubuntu Version: 14.04.4 LTS
  chromium-browser Version: 44.0.2403.89-0ubuntu0.14.04.1.1095

  How to reproduce:
  1. Find an image (https://www.google.com/images/srpr/logo11w.png)
  2. Try to search it with right click > Search Google for this image
  3. Have Google redirect you to google.com/images?sbi=1

  The problem:
  When you search an image on Google, instead of having ?client=ubuntu (or nothing at all) at the end of the URL, it has &client=ubuntu (with no question mark in front)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1490237/+subscriptions