[Secure-testing-commits] r35983 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Aug 11 20:41:43 UTC 2015


Author: carnil
Date: 2015-08-11 20:41:43 +0000 (Tue, 11 Aug 2015)
New Revision: 35983

Modified:
   data/CVE/list
Log:
Add more icewasel issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-11 20:41:35 UTC (rev 35982)
+++ data/CVE/list	2015-08-11 20:41:43 UTC (rev 35983)
@@ -3556,6 +3556,9 @@
 	TODO: check
 CVE-2015-4493
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
 CVE-2015-4492
 	RESERVED
 CVE-2015-4491
@@ -3580,18 +3583,32 @@
 	RESERVED
 CVE-2015-4481
 	RESERVED
-CVE-2015-4480
+CVE-2015-4480 [Overflow issues in libstagefright]
 	RESERVED
-CVE-2015-4479
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
+CVE-2015-4479 [Overflow issues in libstagefright]
 	RESERVED
-CVE-2015-4478
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
+CVE-2015-4478 [Redefinition of non-configurable JavaScript object properties]
 	RESERVED
-CVE-2015-4477
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-82/
+CVE-2015-4477 [Use-after-free in MediaStream playback]
 	RESERVED
+	- iceweasel <not-affected> (Only affects Firefox 39)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-81/
 CVE-2015-4476
 	RESERVED
-CVE-2015-4475
+CVE-2015-4475 [Out-of-bounds read with malformed MP3 file]
 	RESERVED
+	- iceweasel <unfixed>
+	[squeeze] - iceweasel <end-of-life>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-80/
 CVE-2015-4474 [Miscellaneous memory safety hazards]
 	- iceweasel <not-affected> (Only affects Firefox 39)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-79/




More information about the Secure-testing-commits mailing list