Current www/chromium is marked as vulnerable on Google Chrome Releases website 
[1].


--- vuln.xml.old        2014-07-16 22:18:17.000000000 +0200
+++ vuln.xml    2014-07-16 22:38:07.000000000 +0200
@@ -57,6 +57,39 @@
 
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1";>
+  <vuln vid="3718833e-0d27-11e4-89db-000c6e25e3e9">
+    <topic>chromium -- multiple vulnerabilities</topic>
+    <affects>
+      <package>
+       <name>chromium</name>
+       <range><lt>36.0.1985.122</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml";>
+       <p>Google Chrome Releases reports:</p>
+       <blockquote cite="http://googlechromereleases.blogspot.nl";>
+         <p>26 security fixes in this release, including</p>
+         <ul>
+           <li>[380885] Medium CVE-2014-3160: Same-Origin-Policy bypass in 
SVG. Credit
+             to Christian Schneider.</li>
+           <li>[393765] CVE-2014-3162: Various fixes from internal audits, 
fuzzing and 
+              other initiatives.</li>  
+          </ul>                
+       </blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2014-3160</cvename>
+      <cvename>CVE-2014-3162</cvename> 
+      <url>http://googlechromereleases.blogspot.nl</url>
+    </references>
+    <dates>
+      <discovery>2014-07-16</discovery>
+      <entry>2014-07-16</entry>
+    </dates>
+  </vuln>
+

[1] http://googlechromereleases.blogspot.nl
-- 
Carlos Jacobo Puga Medina <c...@fbsd.es>
_______________________________________________
freebsd-chromium@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-chromium
To unsubscribe, send any mail to "freebsd-chromium-unsubscr...@freebsd.org"

Reply via email to