Well... They would hopefully be smarter than committing the fix to the public SVN.
By committing the fix, they would effectively be releasing a step-by-step guide on how to exploit the vulnerability.
By committing the fix, they would effectively be releasing a step-by-step guide on how to exploit the vulnerability.
Certainly if you build Chromium from git/SVN now, the bug is fixed.
I just find it a little strange that their changelog / list of commits in each version is not true.