git: 101ece58fbe2 - main - security/vuxml: add www/*chromium < 142.0.7444.134
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 07 Nov 2025 07:11:58 UTC
The branch main has been updated by rnagy:
URL: https://cgit.FreeBSD.org/ports/commit/?id=101ece58fbe2806be05c810fbae19cd3b9f3fae8
commit 101ece58fbe2806be05c810fbae19cd3b9f3fae8
Author: Robert Nagy <rnagy@FreeBSD.org>
AuthorDate: 2025-11-07 07:11:38 +0000
Commit: Robert Nagy <rnagy@FreeBSD.org>
CommitDate: 2025-11-07 07:11:38 +0000
security/vuxml: add www/*chromium < 142.0.7444.134
Obtained from: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html
---
security/vuxml/vuln/2025.xml | 41 +++++++++++++++++++++++++++++++++++++++++
1 file changed, 41 insertions(+)
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 80c639169c88..eaf80f882338 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,44 @@
+ <vuln vid="93ff3ebe-bba8-11f0-b3f7-a8a1599412c6">
+ <topic>chromium -- multiple security fixes</topic>
+ <affects>
+ <package>
+ <name>chromium</name>
+ <range><lt>142.0.7444.134</lt></range>
+ </package>
+ <package>
+ <name>ungoogled-chromium</name>
+ <range><lt>142.0.7444.134</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Chrome Releases reports:</p>
+ <blockquote cite="https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html">
+ <p>This update includes 5 security fixes:</p>
+ <ul>
+ <li>[443906252] High CVE-2025-12725: Out of bounds write in WebGPU. Reported by Anonymous on 2025-09-09</li>
+ <li>[447172715] High CVE-2025-12726: Inappropriate implementation in Views. Reported by Alesandro Ortiz on 2025-09-25</li>
+ <li>[454485895] High CVE-2025-12727: Inappropriate implementation in V8. Reported by 303f06e3 on 2025-10-23</li>
+ <li>[452392032] Medium CVE-2025-12728: Inappropriate implementation in Omnibox. Reported by Hafiizh on 2025-10-16</li>
+ <li>[454354281] Medium CVE-2025-12729: Inappropriate implementation in Omnibox. Reported by Khalil Zhani on 2025-10-23</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-12725</cvename>
+ <cvename>CVE-2025-12726</cvename>
+ <cvename>CVE-2025-12727</cvename>
+ <cvename>CVE-2025-12728</cvename>
+ <cvename>CVE-2025-12729</cvename>
+ <url>https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html</url>
+ </references>
+ <dates>
+ <discovery>2025-11-05</discovery>
+ <entry>2025-11-07</entry>
+ </dates>
+ </vuln>
+
<vuln vid="77bac392-ba98-11f0-aada-f59a8ea34d12">
<topic>OpenJPH < 0.24.5 -- multiple vulnerabilities</topic>
<affects>