mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-19 00:13:33 +00:00
Code Issues Releases Activity

security/vuxml: add www/*chromium < 124.0.6367.78

Browse Source 
Obtained from:	https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html
This commit is contained in:
Robert Nagy 2024-04-25 23:09:00 +02:00
parent 53ae69167f
commit 59dc2bde28
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
security/vuxml/vuln/2024.xml
View File

@ -1,3 +1,40 @@
<vuln vid="7a42852d-0347-11ef-9f97-a8a1599412c6">
<topic>chromium -- multiple security fixes</topic>
<affects>
<package>
<name>chromium</name>
<range><lt>124.0.6367.78</lt></range>
</package>
<package>
<name>ungoogled-chromium</name>
<range><lt>124.0.6367.78</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Chrome Releases reports:</p>
<blockquote cite="https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html">
<p>This update includes 4 security fixes:</p>
<ul>
<li>[332546345] Critical CVE-2024-4058: Type Confusion in ANGLE. Reported by Toan (suto) Pham and Bao (zx) Pham of Qrious Secure on 2024-04-02</li>
<li>[333182464] High CVE-2024-4059: Out of bounds read in V8 API. Reported by Eirik on 2024-04-08</li>
<li>[333420620] High CVE-2024-4060: Use after free in Dawn. Reported by wgslfuzz on 2024-04-09</li>
</ul>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2024-4058</cvename>
<cvename>CVE-2024-4059</cvename>
<cvename>CVE-2024-4060</cvename>
<url>https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html</url>
</references>
<dates>
<discovery>2024-04-24</discovery>
<entry>2024-04-25</entry>
</dates>
</vuln>
<vuln vid="10e86b16-6836-11ee-b06f-0050569ceb3a">
<topic>Unallowed PHP script execution in GLPI</topic>
<affects>