aboutsummaryrefslogtreecommitdiffstats
path: root/security/vuxml
diff options
context:
space:
mode:
authorrene <rene@FreeBSD.org>2014-07-17 16:29:53 +0800
committerrene <rene@FreeBSD.org>2014-07-17 16:29:53 +0800
commit39ffd147a60ef3d35f1e60a17257db690e79eb30 (patch)
tree65858de15ee8aaa3167b5295975f358fe9bd8de5 /security/vuxml
parentc69bd00426f6653050c98762393128f7149b84ba (diff)
downloadfreebsd-ports-gnome-39ffd147a60ef3d35f1e60a17257db690e79eb30.tar.gz
freebsd-ports-gnome-39ffd147a60ef3d35f1e60a17257db690e79eb30.tar.zst
freebsd-ports-gnome-39ffd147a60ef3d35f1e60a17257db690e79eb30.zip
Document new vulnerabilities in www/chromium < 36.0.1985.125
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es> via freebsd-chromium Obtained from: http://googlechromereleases.blogspot.nl/ MFH: 2014Q3
Diffstat (limited to 'security/vuxml')
-rw-r--r--security/vuxml/vuln.xml33
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 17af2213baaa..5f2196eb593f 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -57,6 +57,39 @@ Notes:
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="3718833e-0d27-11e4-89db-000c6e25e3e9">
+ <topic>chromium -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>chromium</name>
+ <range><lt>36.0.1985.125</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Google Chrome Releases reports:</p>
+ <blockquote cite="http://googlechromereleases.blogspot.nl">
+ <p>26 security fixes in this release, including</p>
+ <ul>
+ <li>[380885] Medium CVE-2014-3160: Same-Origin-Policy bypass in SVG. Credit
+ to Christian Schneider.</li>
+ <li>[393765] CVE-2014-3162: Various fixes from internal audits, fuzzing and
+ other initiatives.</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2014-3160</cvename>
+ <cvename>CVE-2014-3162</cvename>
+ <url>http://googlechromereleases.blogspot.nl</url>
+ </references>
+ <dates>
+ <discovery>2014-07-16</discovery>
+ <entry>2014-07-16</entry>
+ </dates>
+ </vuln>
+
<vuln vid="4a114331-0d24-11e4-8dd2-5453ed2e2b49">
<topic>kdelibs4 -- KMail/KIO POP3 SSL Man-in-the-middle Flaw</topic>
<affects>