desktop-packages team mailing list archive

["Florian W." <1386455@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:

Chromium 38 (released 3 weeks ago) fixes at least $52k worth of security issues:
http://googlechromereleases.blogspot.de/2014/10/stable-channel-update.html

So 159 chromium security fixes (with 113 "relatively minor") are waiting
for a MOTU to be packaged in Ubuntu.

Thanks to anyone taking care of that, and special thanks to Chad Miller
for having done so repeatedly.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: chromium-browser 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
ProcVersionSignature: Ubuntu 3.13.0-37.64-generic 3.13.11.7
Uname: Linux 3.13.0-37-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.5
Architecture: amd64
CurrentDesktop: Unity
Date: Tue Oct 28 00:09:44 2014
InstallationDate: Installed on 2013-03-10 (596 days ago)
InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
SourcePackage: chromium-browser
UpgradeStatus: Upgraded to trusty on 2014-04-22 (188 days ago)
modified.conffile..etc.default.chromium.browser: [deleted]
mtime.conffile..etc.chromium.browser.default: 2014-04-23T00:11:40.712095

** Affects: chromium-browser (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug trusty

** Information type changed from Private Security to Public Security

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3188

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3189

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3190

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3191

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3192

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3193

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3194

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3195

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3196

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3197

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3198

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3199

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3200

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1386455

Title:
  Chromium 37 has 159 known security issues

Status in “chromium-browser” package in Ubuntu:
  New

Bug description:
  Chromium 38 (released 3 weeks ago) fixes at least $52k worth of security issues:
  http://googlechromereleases.blogspot.de/2014/10/stable-channel-update.html

  So 159 chromium security fixes (with 113 "relatively minor") are
  waiting for a MOTU to be packaged in Ubuntu.

  Thanks to anyone taking care of that, and special thanks to Chad
  Miller for having done so repeatedly.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: chromium-browser 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
  ProcVersionSignature: Ubuntu 3.13.0-37.64-generic 3.13.11.7
  Uname: Linux 3.13.0-37-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.5
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Tue Oct 28 00:09:44 2014
  InstallationDate: Installed on 2013-03-10 (596 days ago)
  InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
  SourcePackage: chromium-browser
  UpgradeStatus: Upgraded to trusty on 2014-04-22 (188 days ago)
  modified.conffile..etc.default.chromium.browser: [deleted]
  mtime.conffile..etc.chromium.browser.default: 2014-04-23T00:11:40.712095

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1386455/+subscriptions