Date: Fri, 10 Aug 2012 08:08:27 +0000 (UTC) From: Rene Ladan <rene@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r302378 - head/security/vuxml Message-ID: <201208100808.q7A88R9P009512@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: rene Date: Fri Aug 10 08:08:27 2012 New Revision: 302378 URL: http://svn.freebsd.org/changeset/ports/302378 Log: Document two vulnerabilities in www/chromium < 21.0.1180.75 related to the builtin PDF viewer. Obtained from: http://googlechromereleases.blogspot.com/search/label/Stable%20updates Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Fri Aug 10 08:07:55 2012 (r302377) +++ head/security/vuxml/vuln.xml Fri Aug 10 08:08:27 2012 (r302378) @@ -52,6 +52,38 @@ Note: Please add new entries to the beg --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="60bbe12c-e2c1-11e1-a8ca-00262d5ed8ee"> + <topic>chromium -- multiple vulnerabilities</topic> + <affects> + <package> + <name>chromium</name> + <range><lt>21.0.1180.75</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Google Chrome Releases reports:</p> + <blockquote cite="http://googlechromereleases.blogspot.nl/search/label/Stable%20updates">; + <p>[136643] [137721] [137957] High CVE-2012-2862: Use-after-free in + PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with + contributions by Gynvael Coldwind of Google Security Team.</p> + <p>[136968] [137361] High CVE-2012-2863: Out-of-bounds writes in PDF + viewer. Credit to Mateusz Jurczyk of Google Security Team, with + contributions by Gynvael Coldwind of Google Security Team.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-2862</cvename> + <cvename>CVE-2012-2863</cvename> + <url>http://googlechromereleases.blogspot.com/search/label/Stable%20updates</url>; + </references> + <dates> + <discovery>2012-08-08</discovery> + <entry>2012-08-10</entry> + </dates> + </vuln> + <vuln vid="31db9a18-e289-11e1-a57d-080027a27dbf"> <topic>rubygem-rails -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201208100808.q7A88R9P009512>