FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

chromium -- Incorrect handling of CSP header

Affected packages
		chromium	<	67.0.3396.79

Details

VuXML ID	4cb49a23-6c89-11e8-8b33-e8e0b747a45a
Discovery	2018-06-06
Entry	2018-06-10

Google Chrome Releases reports:

1 security fix contributed by external researchers:

[845961] High CVE-2018-6148: Incorrect handling of CSP header. Reported by Michal Bentkowski on 2018-05-23

[source]

References

CVE Name	CVE-2018-6148
URL	https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html