Bug 203857

Summary:	www/chromium: update to 46.0.2490.71
Product:	Ports & Packages	Reporter:	mitsosgtir
Component:	Individual Port(s)	Assignee:	freebsd-chromium (Nobody) <chromium>
Status:	Closed FIXED
Severity:	Affects Many People	CC:	rene
Priority:	---	Flags:	bugzilla: maintainer-feedback? (chromium)
Version:	Latest
Hardware:	Any
OS:	Any

Description mitsosgtir 2015-10-18 16:39:14 UTC

Chromium needs to be updated to address multiple security vulnerabilities:
CVE-2015-6755: Cross-origin bypass in Blink.
CVE-2015-6756: Use-after-free in PDFium.
CVE-2015-6757: Use-after-free in ServiceWorker.
CVE-2015-6758: Bad-cast in PDFium.
CVE-2015-6759: Information leakage in LocalStorage.
CVE-2015-6760: Improper error handling in libANGLE.
CVE-2015-6761: Memory corruption in FFMpeg.
CVE-2015-6762: CORS bypass via CSS fonts.
CVE-2015-6763: Various fixes from internal audits, fuzzing and other initiatives.

For more information: http://googlechromereleases.blogspot.nl/2015/10/stable-channel-update.html

Comment 1 Rene Ladan freebsd_committer

2015-10-18 16:46:12 UTC

Thanks for the report, however Chromium is already updated in r399613 and r399621. The latter commit was indeed after you sent in this PR.