git: 0d10afdaa3b2 - main - security/vuxml: add www/*chromium < 141.0.7390.122
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 27 Oct 2025 14:27:56 UTC
The branch main has been updated by rnagy:
URL: https://cgit.FreeBSD.org/ports/commit/?id=0d10afdaa3b24eb442c0c34c5341254b4503a604
commit 0d10afdaa3b24eb442c0c34c5341254b4503a604
Author: Robert Nagy <rnagy@FreeBSD.org>
AuthorDate: 2025-10-27 14:27:16 +0000
Commit: Robert Nagy <rnagy@FreeBSD.org>
CommitDate: 2025-10-27 14:27:48 +0000
security/vuxml: add www/*chromium < 141.0.7390.122
Obtained from: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html
---
security/vuxml/vuln/2025.xml | 35 ++++++++++++++++++++++++++++++++++-
1 file changed, 34 insertions(+), 1 deletion(-)
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index a4a5c8a8df0c..715cc5a5cdab 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,36 @@
+ <vuln vid="823b4e48-b340-11f0-b3f7-a8a1599412c6">
+ <topic>chromium -- security fix</topic>
+ <affects>
+ <package>
+ <name>chromium</name>
+ <range><lt>141.0.7390.122</lt></range>
+ </package>
+ <package>
+ <name>ungoogled-chromium</name>
+ <range><lt>141.0.7390.122</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Chrome Releases reports:</p>
+ <blockquote cite="https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html">
+ <p>This update includes 1 security fix:</p>
+ <ul>
+ <li>[452296415] High CVE-2025-12036: Inappropriate implementation in V8. Reported by Google Big Sleep on 2025-10-15</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-12036</cvename>
+ <url>https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html</url>
+ </references>
+ <dates>
+ <discovery>2025-10-21</discovery>
+ <entry>2025-10-27</entry>
+ </dates>
+ </vuln>
+
<vuln vid="ea1c485f-b025-11f0-bce7-bc2411002f50">
<topic>unbound -- Possible domain hijacking via promiscuous records in the authority section</topic>
<affects>
@@ -10,7 +43,7 @@
<body xmlns="http://www.w3.org/1999/xhtml">
<p>sep@nlnetlabs.nl reports:</p>
<blockquote cite="https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt">
- <p>NLnet Labs Unbound up to and including version 1.24.0 is vulnerable
+ <p>NLnet Labs Unbound up to and including version 1.24.0 is vulnerable
to possible domain hijack attacks. Promiscuous NS RRSets that
complement positive DNS replies in the authority section can be
used to trick resolvers to update their delegation information for