Date: Tue, 29 Apr 2014 17:00:46 +0000 (UTC) From: Beat Gaetzi <beat@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r352634 - head/security/vuxml Message-ID: <201404291700.s3TH0k4E035992@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: beat Date: Tue Apr 29 17:00:46 2014 New Revision: 352634 URL: http://svnweb.freebsd.org/changeset/ports/352634 QAT: https://qat.redports.org/buildarchive/r352634/ Log: Document mozilla vulnerabilities Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Apr 29 16:57:07 2014 (r352633) +++ head/security/vuxml/vuln.xml Tue Apr 29 17:00:46 2014 (r352634) @@ -51,6 +51,104 @@ Note: Please add new entries to the beg --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="985d4d6c-cfbd-11e3-a003-b4b52fce4ce8"> + <topic>mozilla -- multiple vulnerabilities</topic> + <affects> + <package> + <name>firefox</name> + <range><lt>29.0,1</lt></range> + </package> + <package> + <name>firefox-esr</name> + <range><lt>24.5.0,1</lt></range> + </package> + <package> + <name>linux-firefox</name> + <range><lt>29.0,1</lt></range> + </package> + <package> + <name>linux-seamonkey</name> + <range><lt>2.26</lt></range> + </package> + <package> + <name>linux-thunderbird</name> + <range><lt>24.5.0</lt></range> + </package> + <package> + <name>seamonkey</name> + <range><lt>2.26</lt></range> + </package> + <package> + <name>thunderbird</name> + <range><lt>24.5.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Mozilla Project reports:</p> + <blockquote cite="http://www.mozilla.org/security/known-vulnerabilities/">; + <p>MFSA 2014-34 Miscellaneous memory safety hazards + (rv:29.0 / rv:24.5)</p> + <p>MFSA 2014-35 Privilege escalation through Mozilla Maintenance + Service Installer</p> + <p>MFSA 2014-36 Web Audio memory corruption issues</p> + <p>MFSA 2014-37 Out of bounds read while decoding JPG images</p> + <p>MFSA 2014-38 Buffer overflow when using non-XBL object as + XBL</p> + <p>MFSA 2014-39 Use-after-free in the Text Track Manager + for HTML video</p> + <p>MFSA 2014-41 Out-of-bounds write in Cairo</p> + <p>MFSA 2014-42 Privilege escalation through Web Notification + API</p> + <p>MFSA 2014-43 Cross-site scripting (XSS) using history + navigations</p> + <p>MFSA 2014-44 Use-after-free in imgLoader while resizing + images</p> + <p>MFSA 2014-45 Incorrect IDNA domain name matching for + wildcard certificates</p> + <p>MFSA 2014-46 Use-after-free in nsHostResolve</p> + <p>MFSA 2014-47 Debugger can bypass XrayWrappers + with JavaScript</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2014-1492</cvename> + <cvename>CVE-2014-1518</cvename> + <cvename>CVE-2014-1519</cvename> + <cvename>CVE-2014-1520</cvename> + <cvename>CVE-2014-1522</cvename> + <cvename>CVE-2014-1523</cvename> + <cvename>CVE-2014-1524</cvename> + <cvename>CVE-2014-1525</cvename> + <cvename>CVE-2014-1526</cvename> + <cvename>CVE-2014-1527</cvename> + <cvename>CVE-2014-1528</cvename> + <cvename>CVE-2014-1529</cvename> + <cvename>CVE-2014-1530</cvename> + <cvename>CVE-2014-1531</cvename> + <cvename>CVE-2014-1532</cvename> + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-34.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-35.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-36.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-37.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-38.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-39.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-41.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-42.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-43.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-44.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-45.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-46.html</url>; + <url>https://www.mozilla.org/security/announce/2014/mfsa2014-47.html</url>; + <url>http://www.mozilla.org/security/known-vulnerabilities/</url>; + </references> + <dates> + <discovery>2014-04-29</discovery> + <entry>2014-04-29</entry> + </dates> + </vuln> + <vuln vid="59e72db2-cae6-11e3-8420-00e0814cab4e"> <topic>django -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201404291700.s3TH0k4E035992>