Date: Tue, 18 Nov 2025 10:05:57 +0000 From: Robert Nagy <rnagy@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 958e2f9c9372 - main - security/vuxml: add www/*chromium < 142.0.7444.175 Message-ID: <691c4505.94b4.41ecca99@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by rnagy: URL: https://cgit.FreeBSD.org/ports/commit/?id=958e2f9c9372c8059a8d3448ed0e3ebf3a76868d commit 958e2f9c9372c8059a8d3448ed0e3ebf3a76868d Author: Robert Nagy <rnagy@FreeBSD.org> AuthorDate: 2025-11-18 10:05:22 +0000 Commit: Robert Nagy <rnagy@FreeBSD.org> CommitDate: 2025-11-18 10:05:51 +0000 security/vuxml: add www/*chromium < 142.0.7444.175 Obtained from: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html --- security/vuxml/vuln/2025.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 08b7d8e93540..a850ad531f62 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,38 @@ + <vuln vid="ca5d4e87-c465-11f0-b3f7-a8a1599412c6"> + <topic>chromium -- multiple security fixes</topic> + <affects> + <package> + <name>chromium</name> + <range><lt>142.0.7444.175</lt></range> + </package> + <package> + <name>ungoogled-chromium</name> + <range><lt>142.0.7444.175</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Chrome Releases reports:</p> + <blockquote cite="https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html">; + <p>This update includes 2 security fixes:</p> + <ul> + <li>[460017370] High CVE-2025-13223: Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group on 2025-11-12</li> + <li>[450328966] High CVE-2025-13224: Type Confusion in V8. Reported by Google Big Sleep on 2025-10-09</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-13223</cvename> + <cvename>CVE-2025-13224</cvename> + <url>https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html</url>; + </references> + <dates> + <discovery>2025-11-17</discovery> + <entry>2025-11-18</entry> + </dates> + </vuln> + <vuln vid="1a46e84d-c406-11f0-b513-0da7be77c170"> <topic>pkcs11-helper -- deserialize buffer overflow</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?691c4505.94b4.41ecca99>