From 9e4133005f664649b790cd68befd2c635bf24c15 Mon Sep 17 00:00:00 2001 From: Rene Ladan Date: Thu, 25 Sep 2014 07:34:52 +0000 Subject: [PATCH] Document new vulnerability in www/chromium < 37.0.2062.124 Obtained from: http://googlechromereleases.blogspot.nl/ MFH: 2014Q3 --- security/vuxml/vuln.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 03885e4b4171..75c518ef9e66 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,34 @@ Notes: --> + + chromium -- RSA signature malleability in NSS + + + chromium + 37.0.2062.124 + + + + +

Google Chrome Releases reports:

+
+

[414124] RSA signature malleability in NSS (CVE-2014-1568). + Thanks to Antoine Delignat-Lavaud of Prosecco/INRIA, Brian Smith + and Advanced Threat Research team at Intel Security

+
+ + + + CVE-2014-1568 + http://googlechromereleases.blogspot.nl/ + + + 2014-09-24 + 2014-09-25 + + + krfb -- Multiple security issues in bundled libvncserver