FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  318524
Date:      2013-05-19
Time:      14:06:36Z
Committer: rakuco

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
4d64fc61-3878-11e2-a4eb-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [156567] High CVE-2012-5133: Use-after-free in SVG filters. Credit to miaubiz. [148638] Medium CVE-2012-5130: Out-of-bounds read in Skia. Credit to Atte Kettunen of OUSPG. [155711] Low CVE-2012-5132: Browser crash with chunked encoding. Credit to Attila Szász. [158249] High CVE-2012-5134: Buffer underflow in libxml. Credit to Google Chrome Security Team (Jüri Aedla). [159165] Medium CVE-2012-5135: Use-after-free with printing. Credit to Fermin Serna of Google Security Team. [159829] Medium CVE-2012-5136: Bad cast in input element handling. Credit to Google Chrome Security Team (Inferno). Discovery 2012-11-26 Entry 2012-11-27 chromium lt 23.0.1271.91 CVE-2012-5130 CVE-2012-5132 CVE-2012-5133 CVE-2012-5134 CVE-2012-5135 CVE-2012-5136 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates
5bae2ab4-0820-11e2-be5f-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [143439] High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. [143437] High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. [139814] High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. [135432] High CVE-2012-2876: Buffer overflow in SSE2 optimizations. Credit to Atte Kettunen of OUSPG. [140803] High CVE-2012-2883: Out-of-bounds write in Skia. Credit to Atte Kettunen of OUSPG. [143609] High CVE-2012-2887: Use-after-free in onclick handling. Credit to Atte Kettunen of OUSPG. [143656] High CVE-2012-2888: Use-after-free in SVG text references. Credit to miaubiz. [144899] High CVE-2012-2894: Crash in graphics context handling. Credit to Slawomir Blazek. [137707] Medium CVE-2012-2877: Browser crash with extensions and modal dialogs. Credit to Nir Moshe. [139168] Low CVE-2012-2879: DOM topology corruption. Credit to pawlkt. [141651] Medium CVE-2012-2884: Out-of-bounds read in Skia. Credit to Atte Kettunen of OUSPG. [132398] High CVE-2012-2874: Out-of-bounds write in Skia. Credit to Google Chrome Security Team (Inferno). [134955] [135488] [137106] [137288] [137302] [137547] [137556] [137606] [137635] [137880] [137928] [144579] [145079] [145121] [145163] [146462] Medium CVE-2012-2875: Various lower severity issues in the PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team. [137852] High CVE-2012-2878: Use-after-free in plug-in handling. Credit to Fermin Serna of Google Security Team. [139462] Medium CVE-2012-2880: Race condition in plug-in paint buffer. Credit to Google Chrome Security Team (Cris Neckar). [140647] High CVE-2012-2882: Wild pointer in OGG container handling. Credit to Google Chrome Security Team (Inferno). [142310] Medium CVE-2012-2885: Possible double free on exit. Credit to the Chromium development community. [143798] [144072] [147402] High CVE-2012-2890: Use-after-free in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team. [144051] Low CVE-2012-2891: Address leak over IPC. Credit to Lei Zhang of the Chromium development community. [144704] Low CVE-2012-2892: Pop-up block bypass. Credit to Google Chrome Security Team (Cris Neckar). [144799] High CVE-2012-2893: Double free in XSL transforms. Credit to Google Chrome Security Team (Cris Neckar). [145029] [145157] [146460] High CVE-2012-2895: Out-of-bounds writes in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team. Discovery 2012-09-25 Entry 2012-09-26 chromium lt 22.0.1229.79 CVE-2012-2889 CVE-2012-2886 CVE-2012-2881 CVE-2012-2876 CVE-2012-2883 CVE-2012-2887 CVE-2012-2888 CVE-2012-2894 CVE-2012-2877 CVE-2012-2879 CVE-2012-2884 CVE-2012-2874 CVE-2012-2875 CVE-2012-2878 CVE-2012-2880 CVE-2012-2882 CVE-2012-2885 CVE-2012-2890 CVE-2012-2891 CVE-2012-2892 CVE-2012-2893 CVE-2012-2895 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates
209c068d-28be-11e2-9160-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [157079] Medium CVE-2012-5127: Integer overflow leading to out-of-bounds read in WebP handling. Credit to Phil Turnbull. [Linux 64-bit only] [150729] Medium CVE-2012-5120: Out-of-bounds array access in v8. Credit to Atte Kettunen of OUSPG. [143761] High CVE-2012-5116: Use-after-free in SVG filter handling. Credit to miaubiz. [Mac OS only] [149717] High CVE-2012-5118: Integer bounds check issue in GPU command buffers. Credit to miaubiz. [154055] High CVE-2012-5121: Use-after-free in video layout. Credit to Atte Kettunen of OUSPG. [145915] Low CVE-2012-5117: Inappropriate load of SVG subresource in img context. Credit to Felix Gröbert of the Google Security Team. [149759] Medium CVE-2012-5119: Race condition in Pepper buffer handling. Credit to Fermin Serna of the Google Security Team. [154465] Medium CVE-2012-5122: Bad cast in input handling. Credit to Google Chrome Security Team (Inferno). [154590] [156826] Medium CVE-2012-5123: Out-of-bounds reads in Skia. Credit to Google Chrome Security Team (Inferno). [155323] High CVE-2012-5124: Memory corruption in texture handling. Credit to Al Patrick of the Chromium development community. [156051] Medium CVE-2012-5125: Use-after-free in extension tab handling. Credit to Alexander Potapenko of the Chromium development community. [156366] Medium CVE-2012-5126: Use-after-free in plug-in placeholder handling. Credit to Google Chrome Security Team (Inferno). [157124] High CVE-2012-5128: Bad write in v8. Credit to Google Chrome Security Team (Cris Neckar). Discovery 2012-11-06 Entry 2012-11-07 chromium lt 23.0.1271.64 CVE-2012-5127 CVE-2012-5120 CVE-2012-5116 CVE-2012-5118 CVE-2012-5121 CVE-2012-5117 CVE-2012-5119 CVE-2012-5122 CVE-2012-5123 CVE-2012-5124 CVE-2012-5125 CVE-2012-5126 CVE-2012-5128 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates
09e83f7f-1326-11e2-afe3-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [154983][154987] Critical CVE-2012-5112: SVG use-after-free and IPC arbitrary file write. Credit to Pinkie Pie. Discovery 2012-10-10 Entry 2012-10-10 chromium lt 22.0.1229.94 CVE-2012-5112 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates
e6161b65-1187-11e2-afe3-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [138208] High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG. [147499] Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG. [148692] Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthur Gerkis. [151449] Medium CVE-2012-5110: Out-of-bounds read in compositor. Credit to Google Chrome Security Team (Inferno). [151895] Low CVE-2012-5111: Plug-in crash monitoring was missing for Pepper plug-ins. Credit to Google Chrome Security Team (Chris Evans). Discovery 2012-10-08 Entry 2012-10-08 chromium lt 22.0.1229.92 CVE-2012-2900 CVE-2012-5108 CVE-2012-5109 CVE-2012-5110 CVE-2012-5111 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates
5af51ae9-3acd-11e2-a4eb-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: [161564] High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team (Jüri Aedla). [162835] High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie. Discovery 2012-11-29 Entry 2012-11-30 chromium lt 23.0.1271.95 CVE-2012-5137 CVE-2012-5138 http://googlechromereleases.blogspot.nl/search/label/Stable%20updates