[Secure-testing-commits] r35983 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Tue Aug 11 20:41:43 UTC 2015
Author: carnil
Date: 2015-08-11 20:41:43 +0000 (Tue, 11 Aug 2015)
New Revision: 35983
Modified:
data/CVE/list
Log:
Add more icewasel issues
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-08-11 20:41:35 UTC (rev 35982)
+++ data/CVE/list 2015-08-11 20:41:43 UTC (rev 35983)
@@ -3556,6 +3556,9 @@
TODO: check
CVE-2015-4493
RESERVED
+ - iceweasel <unfixed>
+ [squeeze] - iceweasel <end-of-life>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
CVE-2015-4492
RESERVED
CVE-2015-4491
@@ -3580,18 +3583,32 @@
RESERVED
CVE-2015-4481
RESERVED
-CVE-2015-4480
+CVE-2015-4480 [Overflow issues in libstagefright]
RESERVED
-CVE-2015-4479
+ - iceweasel <unfixed>
+ [squeeze] - iceweasel <end-of-life>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
+CVE-2015-4479 [Overflow issues in libstagefright]
RESERVED
-CVE-2015-4478
+ - iceweasel <unfixed>
+ [squeeze] - iceweasel <end-of-life>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-83/
+CVE-2015-4478 [Redefinition of non-configurable JavaScript object properties]
RESERVED
-CVE-2015-4477
+ - iceweasel <unfixed>
+ [squeeze] - iceweasel <end-of-life>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-82/
+CVE-2015-4477 [Use-after-free in MediaStream playback]
RESERVED
+ - iceweasel <not-affected> (Only affects Firefox 39)
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-81/
CVE-2015-4476
RESERVED
-CVE-2015-4475
+CVE-2015-4475 [Out-of-bounds read with malformed MP3 file]
RESERVED
+ - iceweasel <unfixed>
+ [squeeze] - iceweasel <end-of-life>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-80/
CVE-2015-4474 [Miscellaneous memory safety hazards]
- iceweasel <not-affected> (Only affects Firefox 39)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-79/
More information about the Secure-testing-commits
mailing list