Date: Sun, 03 May 2026 16:39:50 +0000 From: Fernando Apeste=?utf-8?Q?gu=C3=ADa?= <fernape@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 7807b4a986e3 - main - security/vuxml: Add Mozilla vulnerability Message-ID: <69f77a56.23e40.141ec12f@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by fernape: URL: https://cgit.FreeBSD.org/ports/commit/?id=7807b4a986e3c6dcf80512ff267cbef54950205a commit 7807b4a986e3c6dcf80512ff267cbef54950205a Author: Fernando Apesteguía <fernape@FreeBSD.org> AuthorDate: 2026-05-03 16:38:09 +0000 Commit: Fernando Apesteguía <fernape@FreeBSD.org> CommitDate: 2026-05-03 16:38:09 +0000 security/vuxml: Add Mozilla vulnerability CVE-2026-7323 NIST: NVD Base Score: N/A ADP: CISA-ADP Base Score: 7.3 HIGH Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L --- security/vuxml/vuln/2026.xml | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 3968ec487150..ebcd5c8d39eb 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,42 @@ + <vuln vid="e4a08820-470d-11f1-be75-b42e991fc52e"> + <topic>Mozilla -- Memory safety bugs</topic> + <affects> + <package> + <name>firefox</name> + <range><lt>150.0.1,2</lt></range> + </package> + <package> + <name>firefox-esr</name> + <range><lt>140.10.1</lt></range> + </package> + <package> + <name>thunderbird</name> + <range><lt>150.0.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>https://bugzilla.mozilla.org/buglist.cgi?bug_id=2028537%2C2029911%2C2031121%2C2033602 reports:</p> + <blockquote cite="https://bugzilla.mozilla.org/buglist.cgi?bug_id=2028537%2C2029911%2C2031121%2C2033602">; + <p> + Memory safety bugs. Some of these bugs showed evidence of + memory corruption and we presume that with enough effort + some of these could have been exploited to run arbitrary + code. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-7323</cvename> + <url>https://cveawg.mitre.org/api/cve/CVE-2026-7323</url>; + </references> + <dates> + <discovery>2026-04-28</discovery> + <entry>2026-05-03</entry> + </dates> + </vuln> + <vuln vid="a420f545-442c-11f1-b9b5-589cfc0dc9a2"> <topic>Prosody XMPP server advisory 2026-04-29</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69f77a56.23e40.141ec12f>