From owner-svn-ports-head@FreeBSD.ORG Wed Dec 12 11:33:17 2012 Return-Path: Delivered-To: svn-ports-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D6CAF14F; Wed, 12 Dec 2012 11:33:17 +0000 (UTC) (envelope-from rene@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id A09D58FC08; Wed, 12 Dec 2012 11:33:17 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.5/8.14.5) with ESMTP id qBCBXHBh034576; Wed, 12 Dec 2012 11:33:17 GMT (envelope-from rene@svn.freebsd.org) Received: (from rene@localhost) by svn.freebsd.org (8.14.5/8.14.5/Submit) id qBCBXHB5034575; Wed, 12 Dec 2012 11:33:17 GMT (envelope-from rene@svn.freebsd.org) Message-Id: <201212121133.qBCBXHB5034575@svn.freebsd.org> From: Rene Ladan Date: Wed, 12 Dec 2012 11:33:17 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r308757 - head/security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 11:33:17 -0000 Author: rene Date: Wed Dec 12 11:33:16 2012 New Revision: 308757 URL: http://svnweb.freebsd.org/changeset/ports/308757 Log: Document vulnerabilities in www/chromium < 23.0.1271.97 Obtained from: http://googlechromereleases.blogspot.nl/search/label/Stable%20updates Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Dec 12 11:12:54 2012 (r308756) +++ head/security/vuxml/vuln.xml Wed Dec 12 11:33:16 2012 (r308757) @@ -51,6 +51,49 @@ Note: Please add new entries to the beg --> + + chromium -- multiple vulnerabilities + + + chromium + 23.0.1271.97 + + + + +

Google Chrome Releases reports:

+
[158204] High CVE-2012-5139: Use-after-free with visibility + events. Credit to Chamal de Silva.
+
[159429] High CVE-2012-5140: Use-after-free in URL loader. Credit + to Chamal de Silva.
+
[160456] Medium CVE-2012-5141: Limit Chromoting client plug-in + instantiation. Credit to Google Chrome Security Team (Jüri + Aedla).
+
[160803] Critical CVE-2012-5142: Crash in history navigation. + Credit to Michal Zalewski of Google Security Team.
+
[160926] Medium CVE-2012-5143: Integer overflow in PPAPI image + buffers. Credit to Google Chrome Security Team (Cris Neckar).
+
[161639] High CVE-2012-5144: Stack corruption in AAC decoding. + Credit to pawlkt.
+

+ + + + CVE-2012-5139 + CVE-2012-5140 + CVE-2012-5141 + CVE-2012-5142 + CVE-2012-5143 + CVE-2012-5144 + http://googlechromereleases.blogspot.nl/search/label/Stable%20updates + + + 2012-12-11 + 2012-12-12 + + + tomcat -- multiple vulnerabilities