From nobody Wed Nov 6 12:03:28 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Xk3km2CLnz5cTwM; Wed, 06 Nov 2024 12:03:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Xk3km1Zl9z4ryx; Wed, 6 Nov 2024 12:03:28 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1730894608; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=b0LNvkqdTa9n1FHMYF+6gii03hVL4K1palfzHVdOJDI=; b=Ve1v3Rum7IHBYPUCJlnn7JpfnTdoX/3vPEh1m804voGOQdkl1ZipGfLSP8zFgZbz5sXJpi drI9iQo/kY/Ck0IuNtHhU6gzfBnWQsNTxs2mZyyf3wDf2rrgM8kO1euP0Z7qpm9lCZt1Wp /M4TPoZ+Ra/HNkyTIzLGB20Sl64nBIGgCpeZX6WyOwJo5yvKuWJXWsHAgDPWF/rXszi7qI JepvGiDk32yTyGezB1IPPfrKxMLQPDkA02nroUhUeMxbxYmmqV2NP8Ad9XRNLZErGsu41d OjzdxxNC1r3MUpu7J3D5406PpSU5ILfSCzR0XF8uCfg7Jz92HWCWRx4zJhxb5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1730894608; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=b0LNvkqdTa9n1FHMYF+6gii03hVL4K1palfzHVdOJDI=; b=XeYf/3onCQIgjrY8QmlYDxV+S1Bl/GxOeEsOWQCix12TjDk4gA1B67i7WQ8MzbwVG/UIi/ uRggvzsf0tZ6JIrchp0Xs0v1m5IMBo50BPhN0mBYycKWYU4NTmE8L+Tc0t8Cno2h5VYts/ qruGxP1s3sml2iY3mSZ4A+rosI0DBFOGtG5XpczPxkvyYtL/Bh94IEB7vtK+vEiMvNA+ZO HNYvXsdW1tGBsgfyM8db+P4YjQ0wf/wCLxfWK6zGf/v804QdJr7oqdiX58VWYSkJX8bBJX nK/KYoYDzXFu+Q1onkwBb460no18xJpPyrY+/sFC5GrN58pTiA/RzcG/VDcMJA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1730894608; a=rsa-sha256; cv=none; b=L7s0wNZ8heUQ9i5NYn5HXC8mI0LYN3ihPL+MgC5r06uFPd34Thj7RdsFNb5O8puqsHTHnM SC4ksFrZwot/PpZVwaJlUaI8W3DKq8310avlM8cwnlfstgGWkejH1kmb1+HI+1WkeBFYE/ RnjluWvvge4mGK8gIsShZplas5hnUSB8f4WjmuEXhBBU3joIol07pKFLnt5BX+/XQa0c4+ 6U6gdyF7Zc++bRnscrLw95JmHI+ypHEIaRV8kAK6UAIydT3x9hicHzVgk9DY1Od5w5siqh K2llE0yBVtOI8wNNQR+4wo7kRN8N1CGvNpb2HDocXDsple8udfU5ajm1AtRPRQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Xk3km19t9z11Hw; Wed, 6 Nov 2024 12:03:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 4A6C3SGd087542; Wed, 6 Nov 2024 12:03:28 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 4A6C3SMI087539; Wed, 6 Nov 2024 12:03:28 GMT (envelope-from git) Date: Wed, 6 Nov 2024 12:03:28 GMT Message-Id: <202411061203.4A6C3SMI087539@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Robert Nagy Subject: git: 92e1c36a51ea - main - security/vuxml: add www/*chromium < 130.0.6723.116 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: rnagy X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 92e1c36a51ead6c7c12b7961e5a92c4a73704de4 Auto-Submitted: auto-generated The branch main has been updated by rnagy: URL: https://cgit.FreeBSD.org/ports/commit/?id=92e1c36a51ead6c7c12b7961e5a92c4a73704de4 commit 92e1c36a51ead6c7c12b7961e5a92c4a73704de4 Author: Robert Nagy AuthorDate: 2024-11-06 12:01:53 +0000 Commit: Robert Nagy CommitDate: 2024-11-06 12:03:21 +0000 security/vuxml: add www/*chromium < 130.0.6723.116 Obtained from: https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html --- security/vuxml/vuln/2024.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 8d6ab366760f..9ee764478a03 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,38 @@ + + chromium -- multiple security fixes + + + chromium + 130.0.6723.116 + + + ungoogled-chromium + 130.0.6723.116 + + + + +

Chrome Releases reports:

+
+

This update includes 2 security fixes:

+
    +
  • [370217726] High CVE-2024-10826: Use after free in Family Experiences. Reported by Anonymous on 2024-09-29
    • +
  • [375065084] High CVE-2024-10827: Use after free in Serial. Reported by Anonymous on 2024-10-23
    • +
+
+ + + + CVE-2024-10826 + CVE-2024-10827 + https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html + + + 2024-11-05 + 2024-11-06 + + + libqb -- Buffer overflow