Your message dated Mon, 15 Jun 2015 10:24:08 +0000
with message-id <e1z4rym-0003vf...@franck.debian.org>
and subject line Bug#786909: fixed in chromium-browser 43.0.2357.81-1
has caused the Debian Bug report #786909,
regarding chromium: unconditionally downloads binary blob
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
786909: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: chromium
Version: 43.0.2357.65-1
Severity: serious
Tags: security upstream
Justification: Policy 2.1.2
Control: forwarded -1 https://code.google.com/p/chromium/issues/detail?id=491435
Dear Maintainer,
After upgrading chromium to 43, I noticed that when it is running and
immediately after the machine is on-line it silently starts downloading
"Chrome Hotword Shared Module" extension, which contains a binary without
source code. There seems no opt-out config.
$ chromium --temp-profile &
$ find
/tmp/tmp.*/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/x86-64_ja
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/x86-64_ja/hotword.data
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/x86-64_ja/hotword-x86-64.nexe
$ file
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/x86-64_ja/hotword-x86-64.nexe
/tmp/tmp.YClr3VfmnS/Default/Extensions/lccekmodgklaepjeofjdjpbminllajkg/0.3.0.5_0/_platform_specific/x86-64_ja/hotword-x86-64.nexe:
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked,
BuildID[sha1]=24d25d55886dca48921031d6928b0a34f5659830, stripped
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages chromium depends on:
ii libasound2 1.0.28-1
ii libatk1.0-0 2.16.0-2
ii libc6 2.19-18
ii libcairo2 1.14.2-2
ii libcups2 1.7.5-11
ii libdbus-1-3 1.8.18-1
ii libexpat1 2.1.0-6+b3
ii libfontconfig1 2.11.0-6.3
ii libfreetype6 2.5.2-4
ii libgdk-pixbuf2.0-0 2.31.4-1
ii libglib2.0-0 2.44.1-1
ii libgnome-keyring0 3.12.0-1+b1
ii libgtk2.0-0 2.24.25-3
ii libharfbuzz0b 0.9.40-3
ii libjpeg62-turbo 1:1.4.0-7
ii libnspr4 2:4.10.8-1
ii libnss3 2:3.19-1
ii libpango-1.0-0 1.36.8-3
ii libpangocairo-1.0-0 1.36.8-3
ii libpci3 1:3.2.1-3
ii libspeechd2 0.8-7
ii libspeex1 1.2~rc1.2-1
ii libsrtp0 1.4.5~20130609~dfsg-1.1
ii libstdc++6 5.1.1-7
ii libx11-6 2:1.6.3-1
ii libxcomposite1 1:0.4.4-1
ii libxcursor1 1:1.1.14-1+b1
ii libxdamage1 1:1.1.4-2+b1
ii libxext6 2:1.3.3-1
ii libxfixes3 1:5.0.1-2+b2
ii libxi6 2:1.7.4-1+b2
ii libxml2 2.9.1+dfsg1-4
ii libxrandr2 2:1.4.2-1+b1
ii libxrender1 1:0.9.8-1+b1
ii libxslt1.1 1.1.28-2+b2
ii libxss1 1:1.2.2-1
ii libxtst6 2:1.2.2-1+b1
ii x11-utils 7.7+3
ii xdg-utils 1.1.0~rc1+git20111210-7.4
chromium recommends no packages.
Versions of packages chromium suggests:
ii chromium-l10n 43.0.2357.65-1
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: chromium-browser
Source-Version: 43.0.2357.81-1
We believe that the bug you reported is fixed in the latest version of
chromium-browser, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 786...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Gilbert <mgilb...@debian.org> (supplier of updated chromium-browser
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Jun 2015 04:04:34 +0000
Source: chromium-browser
Binary: chromium chromium-dbg chromium-l10n chromedriver
Architecture: source all
Version: 43.0.2357.81-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Chromium Maintainers
<pkg-chromium-ma...@lists.alioth.debian.org>
Changed-By: Michael Gilbert <mgilb...@debian.org>
Description:
chromedriver - web browser - WebDriver support
chromium - web browser
chromium-dbg - web browser - debugging symbols
chromium-l10n - web browser - language packs
Closes: 786490 786909
Changes:
chromium-browser (43.0.2357.81-1) unstable; urgency=medium
.
* New upstream release fixing missing icon (closes: #786490).
* Disable hotword (closes: #786909).
* Remove some sourceless files.
Checksums-Sha1:
8b7b77ed98b0ad75e4cdbf3f89e059291709bfb7 3925
chromium-browser_43.0.2357.81-1.dsc
180e1587dc9ef1ffb1c0e4a6f7b05030a67e0ac9 327866732
chromium-browser_43.0.2357.81.orig.tar.xz
2c289baa5dc2f12ba76e1204c25184b1f35f1cb2 178500
chromium-browser_43.0.2357.81-1.debian.tar.xz
215fbe09c8510a3063b1ea71517d3e341f0a8806 3166448
chromium-l10n_43.0.2357.81-1_all.deb
Checksums-Sha256:
a2bfe1b9feb8715af26c9e4202faf0e9c7a319914f0f39a4f6fdfa85c3bf97f7 3925
chromium-browser_43.0.2357.81-1.dsc
360df7b5dfe61293a058c23b4fcbcf277fe74869cf95a6fac1023a5658d86d5a 327866732
chromium-browser_43.0.2357.81.orig.tar.xz
7dc4f9ca79593376bf172d408f21990ccb24fd3423b8b61c327eeed93042a350 178500
chromium-browser_43.0.2357.81-1.debian.tar.xz
e392d1f533a88518a255a35e509c0c5eda3e7014439b0d4ef5d93252d2c40d9f 3166448
chromium-l10n_43.0.2357.81-1_all.deb
Files:
35b281bd0fe9a78afa738a6f6a6f2832 3925 web optional
chromium-browser_43.0.2357.81-1.dsc
981a017a3d4c3e54acf97dea35b1935f 327866732 web optional
chromium-browser_43.0.2357.81.orig.tar.xz
c9e73eba95b3c1381f6d66a1028f4c33 178500 web optional
chromium-browser_43.0.2357.81-1.debian.tar.xz
909d0810f43b2cb372ae762ce020adac 3166448 localization optional
chromium-l10n_43.0.2357.81-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=
=t0x5
-----END PGP SIGNATURE-----
--- End Message ---
