Date: Fri, 28 Aug 2015 12:34:31 +0000 (UTC) From: Jan Beich <jbeich@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r395469 - head/security/vuxml Message-ID: <201508281234.t7SCYVUI063039@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: jbeich Date: Fri Aug 28 12:34:31 2015 New Revision: 395469 URL: https://svnweb.freebsd.org/changeset/ports/395469 Log: Document recent mozilla vulnerabilities Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Fri Aug 28 12:28:13 2015 (r395468) +++ head/security/vuxml/vuln.xml Fri Aug 28 12:34:31 2015 (r395469) @@ -58,6 +58,44 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="237a201c-888b-487f-84d3-7d92266381d6"> + <topic>mozilla -- multiple vulnerabilities</topic> + <affects> + <package> + <name>firefox</name> + <range><lt>40.0.3,1</lt></range> + </package> + <package> + <name>linux-firefox</name> + <range><lt>40.0.3,1</lt></range> + </package> + <package> + <name>firefox-esr</name> + <range><lt>38.2.1,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Mozilla Project reports:</p> + <blockquote cite="https://www.mozilla.org/en-US/security/advisories/">; + <p>MFSA 2015-95 Add-on notification bypass through data URLs</p> + <p>MFSA 2015-94 Use-after-free when resizing canvas element + during restyling</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2015-4497</cvename> + <cvename>CVE-2015-4498</cvename> + <url>https://www.mozilla.org/security/advisories/mfsa2015-94/</url>; + <url>https://www.mozilla.org/security/advisories/mfsa2015-95/</url>; + </references> + <dates> + <discovery>2015-08-27</discovery> + <entry>2015-08-28</entry> + </dates> + </vuln> + <vuln vid="4464212e-4acd-11e5-934b-002590263bf5"> <topic>go -- multiple vulnerabilities</topic> <affects> @@ -7756,6 +7794,8 @@ Notes: <p>MFSA-2015-57 Privilege escalation through IPC channel messages</p> <p>MFSA-2015-58 Mozilla Windows updater can be run outside of application directory</p> + <p>MFSA 2015-93 Integer overflows in libstagefright while processing + MP4 video metadata</p> </blockquote> </body> </description> @@ -7775,6 +7815,7 @@ Notes: <cvename>CVE-2015-2717</cvename> <cvename>CVE-2015-2718</cvename> <cvename>CVE-2015-2720</cvename> + <cvename>CVE-2015-4496</cvename> <url>https://www.mozilla.org/security/advisories/mfsa2015-46/</url>; <url>https://www.mozilla.org/security/advisories/mfsa2015-47/</url>; <url>https://www.mozilla.org/security/advisories/mfsa2015-48/</url>; @@ -7788,10 +7829,12 @@ Notes: <url>https://www.mozilla.org/security/advisories/mfsa2015-56/</url>; <url>https://www.mozilla.org/security/advisories/mfsa2015-57/</url>; <url>https://www.mozilla.org/security/advisories/mfsa2015-58/</url>; + <url>https://www.mozilla.org/security/advisories/mfsa2015-93/</url>; </references> <dates> <discovery>2015-05-12</discovery> <entry>2015-05-12</entry> + <modified>2015-08-28</modified> </dates> </vuln>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201508281234.t7SCYVUI063039>