Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Chromium on Stretch

New to Debian (Or Linux in general)? Ask your questions here!
Post Reply
Message
Author
debiantu
Posts: 18
Joined: 2017-03-18 22:41

Chromium on Stretch

#1 Post by debiantu »

Been running Debian 9 as a desktop machine and been very happy with it.

I do realize that by using the stable version of Debian, software won't be updated (generally) and only patched for security/usability issues.

I've read the release notes for Stretch and found the following:
https://www.debian.org/releases/stable/ ... r-security

Chromium and Firefox are the only two browsers recommended for Stretch. What does it mean that Chromium is a leaf package? My take on it - it means that Stretch will get the new version of Chromium when it becomes available.

So for Debian 9 - the current version of Chromium is 59.0.3071.86-1.

From the Debian page on source packages for Chromium:
https://security-tracker.debian.org/tra ... um-browser

I see that there's still some vulnerabilities for Chromium in Stretch but there's a newer version of Chromium that do not have known vulnerabilities in Buster.

I do realize that Buster is the next release of Debian - but Chromium is a leaf package - so why isn't Stretch getting the newer version? Or are the Debian Devs trying to backport the new fixes from the newer version into 59.0.3071.86-1?

thanks!

debiantu
Posts: 18
Joined: 2017-03-18 22:41

Re: Chromium on Stretch

#2 Post by debiantu »

Now Chromium has more issues as you can see in the link I provided.

Chromium is a leaf package which would mean it should be updated to the latest version - right? What does it mean when a piece of software is a "leaf package" in Debian?

From what I read.. it appears to me that version 60.0.3112.78-1 is the latest one now for Chromium so why don't we have that in Stretch?

I do see that the CVEs are "reserved" until they publish the issues - but elsewhere I see that the issues are resolved in version 60.0.3112.78-1.

So on one hand.. it make sense until we wait for the issues to be published.. but on the other hand.. my understanding of what leaf packages are in Debian - the latest version of Chromium isn't available yet.

User avatar
Lysander
Posts: 643
Joined: 2017-02-23 10:07
Location: London
Been thanked: 1 time

Re: Chromium on Stretch

#3 Post by Lysander »

Not a composite answer to the OP but I will say that having used Chromium, Firefox, Opera and Vivaldi, Chromium performs the best out of those mentioned in Stretch. In spite of that I use Opera as my default, mostly out of long-term habit.

Kryten
Posts: 36
Joined: 2015-11-05 01:32
Location: Scotland

Re: Chromium on Stretch

#4 Post by Kryten »

Leaf package in a debian system is one where no other package in that system depends on it.
Need backports to get newer version.Should get security updates for it though.

debiantu
Posts: 18
Joined: 2017-03-18 22:41

Re: Chromium on Stretch

#5 Post by debiantu »

Kryten wrote:Leaf package in a debian system is one where no other package in that system depends on it.
Need backports to get newer version.Should get security updates for it though.
Thanks for telling me what a Leaf package is.

Chromium was just updated to the version I mentioned back in July - so at this point in time.. no known vulnerabilities for Chromium! I'm guessing the reason why it took time to show up in Stretch repos is that it has to go through testing - is that right?

thanks!

User avatar
None1975
df -h | participant
df -h | participant
Posts: 1389
Joined: 2015-11-29 18:23
Location: Russia, Kaliningrad
Has thanked: 45 times
Been thanked: 66 times

Re: Chromium on Stretch

#6 Post by None1975 »

Today 2017-08-07, chromium in debian 9 was updated to version 60.0.3112.78
Image
OS: Debian 12.4 Bookworm / DE: Enlightenment
Debian Wiki | DontBreakDebian, My config files on github

User avatar
RU55EL
Posts: 546
Joined: 2014-04-07 03:42
Location: /home/russel

Re: Chromium on Stretch

#7 Post by RU55EL »

Yep, here too...
Version 60.0.3112.78 (Developer Build) built on Debian 9.1, running on Debian 9.1 (64-bit)

Post Reply