linux-traipu team mailing list archive

[Launchpad Bug Tracker <1099828@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package chromium-browser -
24.0.1312.56-0ubuntu0.12.10.3

---------------
chromium-browser (24.0.1312.56-0ubuntu0.12.10.3) quantal-security; urgency=low

  * Add comment-markers to debian/patches/series file to make patch import
    easier.
  * debian/chromium-browser.install
    - Install remoting locales
  * debian/patches/gyp-config-root.patch
    - Added. Avoids compilation bug on (at least) ARM.
  * debian/patches/arm-neon.patch
    - Added function to determine NEON functionality in ARM at runtime for
      WebRt library in WebKit.
  * Disable lintian warnings about outdated autoconf files in source tree.
  * New upstream version 24.0.1312.56:  (LP: #1099075)
    - CVE-2013-0839: Use-after-free in canvas font handling.
    - CVE-2013-0840: Missing URL validation when opening new windows.
    - CVE-2013-0841: Unchecked array index in content blocking.
    - CVE-2013-0842: Problems with NULL characters embedded in paths.
  * New upstream version 24.0.1312.52:
    - CVE-2012-5145: Use-after-free in SVG layout. Credit to Atte Kettunen of
      OUSPG.
    - CVE-2012-5146: Same origin policy bypass with malformed URL. Credit to
      Erling A Ellingsen and Subodh Iyengar, both of Facebook.
    - CVE-2012-5147: Use-after-free in DOM handling. Credit to José A. Vázquez.
    - CVE-2012-5148: Missing filename sanitization in hyphenation support.
      Credit to Google Chrome Security Team (Justin Schuh).
    - CVE-2012-5149: Integer overflow in audio IPC handling. Credit to Google
      Chrome Security Team (Chris Evans).
    - CVE-2012-5150: Use-after-free when seeking video. Credit to Google Chrome
      Security Team (Inferno).
    - CVE-2012-5151: Integer overflow in PDF JavaScript. Credit to Mateusz
      Jurczyk, with contribution from Gynvael Coldwind, both of Google Security
      Team.
    - CVE-2012-5152: Out-of-bounds read when seeking video. Credit to Google
      Chrome Security Team (Inferno).
    - CVE-2012-5153: Out-of-bounds stack access in v8. Credit to Andreas
      Rossberg of the Chromium development community.
    - CVE-2012-5156: Use-after-free in PDF fields. Credit to Mateusz Jurczyk,
      with contribution from Gynvael Coldwind, both of Google Security Team.
    - CVE-2012-5157: Out-of-bounds reads in PDF image handling. Credit to
      Mateusz Jurczyk, with contribution from Gynvael Coldwind, both of Google
      Security Team.
    - CVE-2013-0828: Bad cast in PDF root handling. Credit to Mateusz Jurczyk,
      with contribution from Gynvael Coldwind, both of Google Security Team.
    - CVE-2013-0829: Corruption of database metadata leading to incorrect file
      access. Credit to Google Chrome Security Team (Jüri Aedla).
    - CVE-2013-0830: Missing NUL termination in IPC. Credit to Google Chrome
      Security Team (Justin Schuh).
    - CVE-2013-0831: Possible path traversal from extension process. Credit to
      Google Chrome Security Team (Tom Sepez).
    - CVE-2013-0832: Use-after-free with printing. Credit to Google Chrome
      Security Team (Cris Neckar).
    - CVE-2013-0833: Out-of-bounds read with printing. Credit to Google Chrome
      Security Team (Cris Neckar).
    - CVE-2013-0834: Out-of-bounds read with glyph handling. Credit to Google
      Chrome Security Team (Cris Neckar).
    - CVE-2013-0835: Browser crash with geolocation. Credit to Arthur Gerkis.
    - CVE-2013-0836: Crash in v8 garbage collection. Credit to Google Chrome
      Security Team (Cris Neckar).
    - CVE-2013-0837: Crash in extension tab handling. Credit to Tom Nielsen.
    - CVE-2013-0838: Tighten permissions on shared memory segments. Credit to
      Google Chrome Security Team (Chris Palmer).
  * debian/rules
    - Ensure get-original-source creates tarballs without revision number.
  * Update all webapps patches for 24.0.1312.52. (LP: #1099828)
    - Additionally update
      debian/patches/7-npapi-permission-not-defaults-to-unauthorized.patch
      to fix a problem where the auth status of the webapps plugin
      would get reset when the online list of allowed plugins (from GOOG)
      was updated.
 -- Chad Miller <chad.miller@xxxxxxxxxxxxx>   Fri, 01 Feb 2013 12:44:02 -0500

** Changed in: chromium-browser (Ubuntu)
       Status: Triaged => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5145

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5146

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5147

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5148

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5149

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5150

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5151

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5152

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5153

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5156

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5157

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0828

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0829

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0830

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0831

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0832

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0833

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0834

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0835

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0836

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0837

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0838

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0839

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0840

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0841

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0842

-- 
You received this bug notification because you are a member of UBUNTU -
AL - BR, which is subscribed to Chromium Browser.
https://bugs.launchpad.net/bugs/1099828

Title:
  Tab bar is not displayed when there is only one page open in a window

Status in Chromium Browser:
  Unknown
Status in Chromium extension: Unity Integration:
  Fix Committed
Status in “chromium-browser” package in Ubuntu:
  Fix Released

Bug description:
  On Ubuntu 12.10 with Chromium version 23.0.1271.97, the tab bar is not
  shown when there is only one tab open.

  On Ubuntu 12.04 with the same Chromium version, the problem does not appear.
  On Windows with Chrome with the same version number, the problem does not appear.

  You can see a screenshot of the bug here :
  http://img849.imageshack.us/img849/7515/chromewp.png

To manage notifications about this bug go to:
https://bugs.launchpad.net/chromium-browser/+bug/1099828/+subscriptions