Date: Wed, 30 Oct 2024 18:49:03 GMT From: Vladimir Druzenko <vvd@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: e5b28e0a67ce - main - security/vuxml: www/librewolf < 131.0.3 CVE-2024-9936 Message-ID: <202410301849.49UIn3Pp091679@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by vvd: URL: https://cgit.FreeBSD.org/ports/commit/?id=e5b28e0a67cea0006f89eaae2ec607dd5c567bc7 commit e5b28e0a67cea0006f89eaae2ec607dd5c567bc7 Author: Martin Filla <freebsd@sysctl.cz> AuthorDate: 2024-10-30 18:45:39 +0000 Commit: Vladimir Druzenko <vvd@FreeBSD.org> CommitDate: 2024-10-30 18:47:01 +0000 security/vuxml: www/librewolf < 131.0.3 CVE-2024-9936 PR: 282423 --- security/vuxml/vuln/2024.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index f4b945542076..f3e3444f0522 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,31 @@ + <vuln vid="b73d1f2a-96de-11ef-9e71-00d8612f03c8"> + <topic>librewolf -- Undefined behavior in selection node cache</topic> + <affects> + <package> + <name>librewolf</name> + <range><lt>131.0.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>security@mozilla.org reports:</p> + <blockquote cite="https://bugzilla.mozilla.org/show_bug.cgi?id=1920381">; + <p>When manipulating the selection node cache, an attacker may have + been able to cause unexpected behavior, potentially leading to an + exploitable crash. This vulnerability affects Firefox < 131.0.3.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2024-9936</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2024-9936</url>; + </references> + <dates> + <discovery>2024-10-14</discovery> + <entry>2024-10-30</entry> + </dates> + </vuln> + <vuln vid="4b3a8e7d-9372-11ef-87ad-a8a15998b5cb"> <topic>hwloc2 -- Denial of service or other unspecified impacts</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202410301849.49UIn3Pp091679>