Your message dated Tue, 18 Feb 2020 01:13:56 +0000
with message-id <[email protected]>
and subject line Bug#947207: fixed in chromium 80.0.3987.106-1
has caused the Debian Bug report #947207,
regarding chromium: Video is garbled on twitch.tv, most other video sites
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
947207: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947207
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: chromium
Version: 79.0.3945.79-1
Severity: normal
Dear Maintainer,
The hardware video support seems to have broken in a recent update. E.g.
https://www.twitch.tv/videos/290265920 .
Turning off "Use hardware acceleration when available" in the settings fixes it.
Upstream bug: https://bugs.chromium.org/p/chromium/issues/detail?id=1036725
Regards, Thue
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.3.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8), LANGUAGE=
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages chromium depends on:
ii chromium-common 79.0.3945.79-1
ii libasound2 1.1.9-1
ii libatk-bridge2.0-0 2.34.1-2
ii libatk1.0-0 2.34.1-1
ii libatomic1 9.2.1-21
ii libatspi2.0-0 2.34.0-3
ii libavcodec58 7:4.2.1-2
ii libavformat58 7:4.2.1-2
ii libavutil56 7:4.2.1-2
ii libc6 2.29-6
ii libcairo-gobject2 1.16.0-4
ii libcairo2 1.16.0-4
ii libcups2 2.3.0-7
ii libdbus-1-3 1.12.16-2
ii libdrm2 2.4.100-4
ii libevent-2.1-7 2.1.11-stable-1
ii libexpat1 2.2.9-1
ii libflac8 1.3.3-1
ii libfontconfig1 2.13.1-2+b1
ii libfreetype6 2.10.1-2
ii libgcc1 1:9.2.1-21
ii libgdk-pixbuf2.0-0 2.40.0+dfsg-1
ii libglib2.0-0 2.62.3-2
ii libgtk-3-0 3.24.13-1
ii libharfbuzz0b 2.6.4-1
ii libicu63 63.2-2
ii libjpeg62-turbo 1:1.5.2-2+b1
ii libjsoncpp1 1.7.4-3+b1
ii liblcms2-2 2.9-4
ii libminizip1 1.1-8+b1
ii libnspr4 2:4.23-1
ii libnss3 2:3.47.1-1
ii libopenjp2-7 2.3.1-1
ii libopus0 1.3-1+b1
ii libpango-1.0-0 1.42.4-7
ii libpangocairo-1.0-0 1.42.4-7
ii libpci3 1:3.6.2-6
ii libpng16-16 1.6.37-1
ii libpulse0 13.0-3
ii libre2-5 20191101+dfsg-1
ii libsnappy1v5 1.1.7-2
ii libstdc++6 9.2.1-21
ii libva2 2.5.0-2
ii libvpx6 1.8.1-2
ii libwebp6 0.6.1-2+b1
ii libwebpdemux2 0.6.1-2+b1
ii libwebpmux3 0.6.1-2+b1
ii libx11-6 2:1.6.8-1
ii libx11-xcb1 2:1.6.8-1
ii libxcb1 1.13.1-2
ii libxcomposite1 1:0.4.4-2
ii libxcursor1 1:1.2.0-2
ii libxdamage1 1:1.1.5-1
ii libxext6 2:1.3.3-1+b2
ii libxfixes3 1:5.0.3-1
ii libxi6 2:1.7.9-1
ii libxml2 2.9.4+dfsg1-8
ii libxrandr2 2:1.5.1-1
ii libxrender1 1:0.9.10-1
ii libxslt1.1 1.1.32-2.2
ii libxss1 1:1.2.3-1
ii libxtst6 2:1.2.3-1
ii zlib1g 1:1.2.11.dfsg-1+b1
Versions of packages chromium recommends:
ii chromium-sandbox 79.0.3945.79-1
Versions of packages chromium suggests:
pn chromium-driver <none>
pn chromium-l10n <none>
pn chromium-shell <none>
Versions of packages chromium-common depends on:
ii x11-utils 7.7+4
ii xdg-utils 1.1.3-1
Versions of packages chromium-common recommends:
ii chromium-sandbox 79.0.3945.79-1
ii fonts-liberation 1:1.07.4-10
ii gnome-shell [notification-daemon] 3.34.2-1
ii libgl1-mesa-dri 19.3.1-2
ii libu2f-udev 1.1.10-1
ii notification-daemon 3.20.0-4
ii plasma-workspace [notification-daemon] 4:5.14.5.1-4
ii system-config-printer 1.5.12-1
ii upower 0.99.11-1
Versions of packages chromium-sandbox depends on:
ii libatomic1 9.2.1-21
ii libc6 2.29-6
ii libgcc1 1:9.2.1-21
ii libstdc++6 9.2.1-21
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: chromium
Source-Version: 80.0.3987.106-1
Done: Michael Gilbert <[email protected]>
We believe that the bug you reported is fixed in the latest version of
chromium, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Gilbert <[email protected]> (supplier of updated chromium package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Feb 2020 23:33:50 +0000
Source: chromium
Architecture: source
Version: 80.0.3987.106-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Team <[email protected]>
Changed-By: Michael Gilbert <[email protected]>
Closes: 947207
Changes:
chromium (80.0.3987.106-1) unstable; urgency=medium
.
* New upstream stable release.
- CVE-2019-19923: Out of bounds memory access in SQLite. Reported by
Richard Lorenz
- CVE-2019-19925: Vulnerability in SQLite. Reported by Richard Lorenz
- CVE-2019-19926: Inappropriate implementation in SQLite. Reported by
Richard Lorenz
- CVE-2019-19880: Vulnerability in SQLite. Reported by Richard Lorenz
- CVE-2020-6381: Integer overflow in JavaScript. Reported by The UK's
National Cyber Security Centre
- CVE-2020-6382: Type Confusion in JavaScript. Reported by Soyeon Park and
Wen Xu
- CVE-2020-6385: Insufficient policy enforcement in storage. Reported by
Sergei Glazunov
- CVE-2020-6387: Out of bounds write in WebRTC. Reported by Natalie
Silvanovich
- CVE-2020-6388: Out of bounds memory access in WebAudio. Reported by
Sergei Glazunov
- CVE-2020-6389: Out of bounds write in WebRTC. Reported by Natalie
Silvanovich
- CVE-2020-6390: Out of bounds memory access in streams. Reported by Sergei
Glazunov
- CVE-2020-6391: Insufficient validation of untrusted input in Blink.
Reported by Michał Bentkowski
- CVE-2020-6392: Insufficient policy enforcement in extensions. Reported by
Microsoft Edge Team
- CVE-2020-6393: Insufficient policy enforcement in Blink. Reported by Mark
Amery
- CVE-2020-6394: Insufficient policy enforcement in Blink. Reported by Phil
Freo
- CVE-2020-6395: Out of bounds read in JavaScript. Reported by Pierre
Langlois
- CVE-2020-6396: Inappropriate implementation in Skia. Reported by William
Luc Ritchie
- CVE-2020-6397: Incorrect security UI in sharing. Reported by Khalil Zhani
- CVE-2020-6398: Uninitialized use in PDFium. Reported by pdknsk
- CVE-2020-6399: Insufficient policy enforcement in AppCache. Reported by
Luan Herrera
- CVE-2020-6400: Inappropriate implementation in CORS. Reported by Takashi
Yoneuchi
- CVE-2020-6401: Insufficient validation of untrusted input in Omnibox.
Reported by Tzachy Horesh
- CVE-2020-6402: Insufficient policy enforcement in downloads. Reported by
Vladimir Metnew
- CVE-2020-6403: Incorrect security UI in Omnibox. Reported by Khalil Zhani
- CVE-2020-6404: Inappropriate implementation in Blink. Reported by kanchi
- CVE-2020-6405: Out of bounds read in SQLite. Reported by Yongheng Chen
and Rui Zhong
- CVE-2020-6406: Use after free in audio. Reported by Sergei Glazunov
- CVE-2020-6408: Insufficient policy enforcement in CORS. Reported by Zhong
Zhaochen
- CVE-2020-6409: Inappropriate implementation in Omnibox. Reported by
Divagar S and Bharathi V
- CVE-2020-6410: Insufficient policy enforcement in navigation. Reported by
evi1m0
- CVE-2020-6411: Insufficient validation of untrusted input in Omnibox.
Reported by Khalil Zhani
- CVE-2020-6412: Insufficient validation of untrusted input in Omnibox.
Reported by Zihan Zheng
- CVE-2020-6413: Inappropriate implementation in Blink. Reported by Michał
Bentkowski
- CVE-2020-6414: Insufficient policy enforcement in Safe Browsing. Reported
by Lijo A.T
- CVE-2020-6415: Inappropriate implementation in JavaScript. Reported by
Avihay Cohen
- CVE-2020-6416: Insufficient data validation in streams. Reported by
Woojin Oh
- CVE-2020-6417: Inappropriate implementation in installer. Reported by
Renato Moraes and Altieres Rohr
* Remove --ignore-gpu-blacklist from the default flags (closes: #947207).
* Update standards version to 4.5.0.
* Build with clang instead of gcc.
Checksums-Sha1:
75ec0de633fbad97666eedcc25036d97219c411d 4198 chromium_80.0.3987.106-1.dsc
eb411ad178b52d6dac084f8789edbbd4cc83b005 316714372
chromium_80.0.3987.106.orig.tar.xz
eaf07ac6785571464daa6f82ed7f33b9a5e182e3 194560
chromium_80.0.3987.106-1.debian.tar.xz
d5ed36be2a84f572973ddc3a3a6d5fa41c2cc83e 21499
chromium_80.0.3987.106-1_source.buildinfo
Checksums-Sha256:
aeebf534f69fe8f269f9dc7dee41ee60b506e535f5fd7d6bf872d20db94a0590 4198
chromium_80.0.3987.106-1.dsc
c08871586235d4e3df1f89237dfd8c65534a9dc30bb799e29aaf48a9ac5fb6ca 316714372
chromium_80.0.3987.106.orig.tar.xz
91f303a08b8e28b3da80ed6549c78593727e8d2fd807c274586ff990b212484b 194560
chromium_80.0.3987.106-1.debian.tar.xz
99ec997291c6045fc6f3389e194754ffd2f0807049ea65aa819af43392400094 21499
chromium_80.0.3987.106-1_source.buildinfo
Files:
e4c3dc566f004d4dd640ef5344e0db6c 4198 web optional chromium_80.0.3987.106-1.dsc
b0c348f5d830533fe3a100ba7a8a4198 316714372 web optional
chromium_80.0.3987.106.orig.tar.xz
01af9ad7625829c6efe46ccbf0cecc4c 194560 web optional
chromium_80.0.3987.106-1.debian.tar.xz
aa544b5039f429df3dcea393633eaf8b 21499 web optional
chromium_80.0.3987.106-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ly8v
-----END PGP SIGNATURE-----
--- End Message ---