svn commit: r352634 - head/security/vuxml
Beat Gaetzi
beat at FreeBSD.org
Tue Apr 29 17:00:47 UTC 2014
Author: beat
Date: Tue Apr 29 17:00:46 2014
New Revision: 352634
URL: http://svnweb.freebsd.org/changeset/ports/352634
QAT: https://qat.redports.org/buildarchive/r352634/
Log:
Document mozilla vulnerabilities
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Tue Apr 29 16:57:07 2014 (r352633)
+++ head/security/vuxml/vuln.xml Tue Apr 29 17:00:46 2014 (r352634)
@@ -51,6 +51,104 @@ Note: Please add new entries to the beg
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="985d4d6c-cfbd-11e3-a003-b4b52fce4ce8">
+ <topic>mozilla -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>firefox</name>
+ <range><lt>29.0,1</lt></range>
+ </package>
+ <package>
+ <name>firefox-esr</name>
+ <range><lt>24.5.0,1</lt></range>
+ </package>
+ <package>
+ <name>linux-firefox</name>
+ <range><lt>29.0,1</lt></range>
+ </package>
+ <package>
+ <name>linux-seamonkey</name>
+ <range><lt>2.26</lt></range>
+ </package>
+ <package>
+ <name>linux-thunderbird</name>
+ <range><lt>24.5.0</lt></range>
+ </package>
+ <package>
+ <name>seamonkey</name>
+ <range><lt>2.26</lt></range>
+ </package>
+ <package>
+ <name>thunderbird</name>
+ <range><lt>24.5.0</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Mozilla Project reports:</p>
+ <blockquote cite="http://www.mozilla.org/security/known-vulnerabilities/">
+ <p>MFSA 2014-34 Miscellaneous memory safety hazards
+ (rv:29.0 / rv:24.5)</p>
+ <p>MFSA 2014-35 Privilege escalation through Mozilla Maintenance
+ Service Installer</p>
+ <p>MFSA 2014-36 Web Audio memory corruption issues</p>
+ <p>MFSA 2014-37 Out of bounds read while decoding JPG images</p>
+ <p>MFSA 2014-38 Buffer overflow when using non-XBL object as
+ XBL</p>
+ <p>MFSA 2014-39 Use-after-free in the Text Track Manager
+ for HTML video</p>
+ <p>MFSA 2014-41 Out-of-bounds write in Cairo</p>
+ <p>MFSA 2014-42 Privilege escalation through Web Notification
+ API</p>
+ <p>MFSA 2014-43 Cross-site scripting (XSS) using history
+ navigations</p>
+ <p>MFSA 2014-44 Use-after-free in imgLoader while resizing
+ images</p>
+ <p>MFSA 2014-45 Incorrect IDNA domain name matching for
+ wildcard certificates</p>
+ <p>MFSA 2014-46 Use-after-free in nsHostResolve</p>
+ <p>MFSA 2014-47 Debugger can bypass XrayWrappers
+ with JavaScript</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2014-1492</cvename>
+ <cvename>CVE-2014-1518</cvename>
+ <cvename>CVE-2014-1519</cvename>
+ <cvename>CVE-2014-1520</cvename>
+ <cvename>CVE-2014-1522</cvename>
+ <cvename>CVE-2014-1523</cvename>
+ <cvename>CVE-2014-1524</cvename>
+ <cvename>CVE-2014-1525</cvename>
+ <cvename>CVE-2014-1526</cvename>
+ <cvename>CVE-2014-1527</cvename>
+ <cvename>CVE-2014-1528</cvename>
+ <cvename>CVE-2014-1529</cvename>
+ <cvename>CVE-2014-1530</cvename>
+ <cvename>CVE-2014-1531</cvename>
+ <cvename>CVE-2014-1532</cvename>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-34.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-35.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-36.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-37.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-38.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-39.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-41.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-42.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-43.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-44.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-45.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-46.html</url>
+ <url>https://www.mozilla.org/security/announce/2014/mfsa2014-47.html</url>
+ <url>http://www.mozilla.org/security/known-vulnerabilities/</url>
+ </references>
+ <dates>
+ <discovery>2014-04-29</discovery>
+ <entry>2014-04-29</entry>
+ </dates>
+ </vuln>
+
<vuln vid="59e72db2-cae6-11e3-8420-00e0814cab4e">
<topic>django -- multiple vulnerabilities</topic>
<affects>
More information about the svn-ports-all
mailing list