diff options
| author | Rene Ladan <rene@FreeBSD.org> | 2020-08-18 19:36:51 +0000 |
|---|---|---|
| committer | Rene Ladan <rene@FreeBSD.org> | 2020-08-18 19:36:51 +0000 |
| commit | 09551cd8d272a962794b1a834dad7cda9b7d712e (patch) | |
| tree | c64c91dad14a6163d19236ec2a68cc617b698cfa | |
| parent | www/firefox: fix build on powerpc64 (diff) | |
Document new vulnerability in www/chromium < 84.0.4147.135
Notes
Notes:
svn path=/head/; revision=545255
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 91406961ccce..d006e9d0540b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,37 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="64575bb6-e188-11ea-beed-e09467587c17"> + <topic>chromium -- heap buffer overflow</topic> + <affects> + <package> + <name>chromium</name> + <range><lt>84.0.4147.135</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Chrome Releases reports:</p> + <blockquote cite="https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html"> + <p>This release contains one security fix:</p> + <ul> + <li>[1115345] High CVE-2020-6556: Heap buffer overflow in + SwiftShader. Reported by Alison Huffman, Microsoft Browser + Vulnerability Research on 2020-08-12</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2020-6556</cvename> + <url>https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html</url> + </references> + <dates> + <discovery>2020-08-18</discovery> + <entry>2020-08-18</entry> + </dates> + </vuln> + <vuln vid="f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621"> <topic>ceph14 -- HTTP header injection via CORS ExposeHeader tag</topic> <affects> |