aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRene Ladan <rene@FreeBSD.org>2022-06-22 07:56:21 +0000
committerRene Ladan <rene@FreeBSD.org>2022-06-22 08:02:26 +0000
commite408d5e4ec74b0d09aa3306a49065cac0c429427 (patch)
tree67e2bcb9ae9c241bc4b8a2a2e596b7a508f0e32d
parentdf397bbeed1e838c1311c69541b5f9187e75ce36 (diff)
downloadports-e408d5e4ec74b0d09aa3306a49065cac0c429427.tar.gz
ports-e408d5e4ec74b0d09aa3306a49065cac0c429427.zip
security/vuxml: add www/chromium < 103.0.5060.53
-rw-r--r--security/vuxml/vuln-2022.xml46
1 files changed, 46 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml
index 290b8df3b177..93de1ddaa75c 100644
--- a/security/vuxml/vuln-2022.xml
+++ b/security/vuxml/vuln-2022.xml
@@ -1,3 +1,48 @@
+ <vuln vid="b2a4c5f1-f1fe-11ec-bcd2-3065ec8fd3ec">
+ <topic>chromium -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>chromium</name>
+ <range><lt>103.0.5060.53</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Chrome Releases reports:</p>
+ <blockquote cite="https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html">
+ <p>This release contains 14 security fixes, including:</p>
+ <ul>
+ <li>[1335458] Critical CVE-2022-2156: Use after free in Base. Reported by Mark Brand of Google Project Zero on 2022-06-11</li>
+ <li>[1327312] High CVE-2022-2157: Use after free in Interest groups. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab on 2022-05-19</li>
+ <li>[1321078] High CVE-2022-2158: Type Confusion in V8. Reported by Bohan Liu (@P4nda20371774) of Tencent Security Xuanwu Lab on 2022-04-29</li>
+ <li>[1116450] Medium CVE-2022-2160: Insufficient policy enforcement in DevTools. Reported by David Erceg on 2020-08-14</li>
+ <li>[1330289] Medium CVE-2022-2161: Use after free in WebApp Provider. Reported by Zhihua Yao of KunLun Lab on 2022-05-30</li>
+ <li>[1307930] Medium CVE-2022-2162: Insufficient policy enforcement in File System API. Reported by Abdelhamid Naceri (halov) on 2022-03-19</li>
+ <li>[1308341] Low CVE-2022-2163: Use after free in Cast UI and Toolbar. Reported by Chaoyuan Peng (@ret2happy) on 2022-03-21</li>
+ <li>[1268445] Low CVE-2022-2164: Inappropriate implementation in Extensions API. Reported by José Miguel Moreno Computer Security Lab (COSEC) at UC3M on 2021-11-10</li>
+ <li>[1250993] Low CVE-2022-2165: Insufficient data validation in URL formatting. Reported by Rayyan Bijoora on 2021-09-19</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2022-2156</cvename>
+ <cvename>CVE-2022-2157</cvename>
+ <cvename>CVE-2022-2158</cvename>
+ <cvename>CVE-2022-2160</cvename>
+ <cvename>CVE-2022-2161</cvename>
+ <cvename>CVE-2022-2162</cvename>
+ <cvename>CVE-2022-2163</cvename>
+ <cvename>CVE-2022-2164</cvename>
+ <cvename>CVE-2022-2165</cvename>
+ <url>https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html</url>
+ </references>
+ <dates>
+ <discovery>2022-06-21</discovery>
+ <entry>2022-06-22</entry>
+ </dates>
+ </vuln>
+
<vuln vid="482456fb-e9af-11ec-93b6-318d1419ea39">
<topic> Security Vulnerability found in ExifTool leading to RCE </topic>
<affects>
@@ -23,6 +68,7 @@
<entry>2022-06-11</entry>
</dates>
</vuln>
+
<vuln vid="ad37a349-ebb7-11ec-b9f7-21427354249d">
<topic>mitmproxy -- Insufficient Protection against HTTP Request Smuggling</topic>
<affects>