aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorrene <rene@FreeBSD.org>2011-04-15 06:14:58 +0800
committerrene <rene@FreeBSD.org>2011-04-15 06:14:58 +0800
commit84fb757ef197515d25ebc239e94a4cea5d00c95b (patch)
tree5d1946da1b139fc0f6e861a4180a2898ba9e2afd /security
parent32713b40c4175bb58327e7f7e0e9e7e636497090 (diff)
downloadfreebsd-ports-gnome-84fb757ef197515d25ebc239e94a4cea5d00c95b.tar.gz
freebsd-ports-gnome-84fb757ef197515d25ebc239e94a4cea5d00c95b.tar.zst
freebsd-ports-gnome-84fb757ef197515d25ebc239e94a4cea5d00c95b.zip
Document www/chromium vulnerabilities
Security: CVE-2011-1301, CVE-2011-1302
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml12
1 files changed, 10 insertions, 2 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 8eb3d03db297..e2929d8f723f 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -2814,13 +2814,19 @@ Note: Please add new entries to the beginning of this file.
<affects>
<package>
<name>chromium</name>
- <range><lt>10.0.648.204</lt></range>
+ <range><lt>10.0.648.205</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Google Chrome Releases reports:</p>
<blockquote cite="http://googlechromereleases.blogspot.com/search/label/Stable%20updates">
+ <p>Fixed in 10.0.648.205:<br/>
+ [75629] Critical CVE-2011-1301: Use-after-free in the GPU process.
+ Credit to Google Chrome Security Team (Inferno).<br/>
+ [78524] Critical CVE-2011-1302: Heap overflow in the GPU process.
+ Credit to Christoph Diehl.</p>
+
<p>Fixed in 10.0.648.204:<br/>
[72517] High CVE-2011-1291: Buffer error in base string handling.
Credit to Alex Turpin.<br/>
@@ -3095,11 +3101,13 @@ Note: Please add new entries to the beginning of this file.
<cvename>CVE-2011-1294</cvename>
<cvename>CVE-2011-1295</cvename>
<cvename>CVE-2011-1296</cvename>
+ <cvename>CVE-2011-1301</cvename>
+ <cvename>CVE-2011-1302</cvename>
</references>
<dates>
<discovery>2010-10-19</discovery>
<entry>2010-12-07</entry>
- <modified>2011-03-26</modified>
+ <modified>2011-04-14</modified>
</dates>
</vuln>