svn commit: r463160 - head/security/vuxml

Tue Feb 27 20:22:56 UTC 2018

Author: riggs
Date: Tue Feb 27 20:22:55 2018
New Revision: 463160
URL: https://svnweb.freebsd.org/changeset/ports/463160

Log:
  Document CVE-2018-6056 in chromium 64.0.3282.167
  
  Reported by:	Tommi Pernila <tommi.pernila at iki.fi> (via e-mail)

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Tue Feb 27 20:15:39 2018	(r463159)
+++ head/security/vuxml/vuln.xml	Tue Feb 27 20:22:55 2018	(r463160)
@@ -58,6 +58,35 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="abfc932e-1ba8-11e8-a944-54ee754af08e">
+  <topic>chromium -- vulnerability</topic>
+   <affects>
+     <package>
+       <name>chromium</name>
+       <range><lt>64.0.3282.167</lt></range>
+     </package>
+   </affects>
+   <description>
+     <body xmlns="http://www.w3.org/1999/xhtml">
+       <p>Google Chrome Releases reports:</p>
+       <blockquote cite="https://chromereleases.googleblog.com/2018/02/stable-channel-update-for-desktop_13.html">
+	 <p>1 security fix in this release:</p>
+	 <ul>
+	   <li>[806388] High CVE-2018-6056: Incorrect derived class instantiation in V8. Reported by lokihardt of Google Project Zero on 2018-01-26</li>
+	 </ul>
+       </blockquote>
+     </body>
+   </description>
+   <references>
+     <cvename>CVE-2018-6056</cvename>
+     <url>https://chromereleases.googleblog.com/2018/02/stable-channel-update-for-desktop_13.html</url>
+   </references>
+   <dates>
+     <discovery>2018-01-26</discovery>
+     <entry>2018-02-27</entry>
+   </dates>
+  </vuln>
+
   <vuln vid="8e986b2b-1baa-11e8-a944-54ee754af08e">
   <topic>chromium -- multiple vulnerabilities</topic>
    <affects>
