[Git][security-tracker-team/security-tracker][master] Track firefox issues fixed via unstable for mfsa2024-33
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Aug 7 05:49:29 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
99e7d3e7 by Salvatore Bonaccorso at 2024-08-07T06:48:54+02:00
Track firefox issues fixed via unstable for mfsa2024-33
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -195,38 +195,38 @@ CVE-2024-7532
- chromium <unfixed>
[bullseye] - chromium <end-of-life> (see #1061268)
CVE-2024-7531 (Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7531
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7531
CVE-2024-7530 (Incorrect garbage collection interaction could have led to a use-after ...)
- - firefox <unfixed>
+ - firefox 129.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7530
CVE-2024-7529 (The date picker could partially obscure security prompts. This could b ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7529
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7529
CVE-2024-7528 (Incorrect garbage collection interaction in IndexedDB could have led t ...)
- - firefox <unfixed>
+ - firefox 129.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7528
CVE-2024-7527 (Unexpected marking work at the start of sweeping could have led to a u ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7527
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7527
CVE-2024-7526 (ANGLE failed to initialize parameters which lead to reading from unini ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7526
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7526
CVE-2024-7525 (It was possible for a web extension with minimal permissions to create ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7525
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7525
CVE-2024-7524 (Firefox adds web-compatibility shims in place of some tracking scripts ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7524
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7524
@@ -234,25 +234,25 @@ CVE-2024-7523 (A select option could partially obscure security prompts. This co
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7523
CVE-2024-7522 (Editor code failed to check an attribute value. This could have led to ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7522
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7522
CVE-2024-7521 (Incomplete WebAssembly exception handing could have led to a use-after ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7521
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7521
CVE-2024-7520 (A type confusion bug in WebAssembly could be leveraged by an attacker ...)
- - firefox <unfixed>
+ - firefox 129.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7520
CVE-2024-7519 (Insufficient checks when processing graphics shared memory could have ...)
- - firefox <unfixed>
+ - firefox 129.0-1
- firefox-esr <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7519
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7519
CVE-2024-7518 (Select options could obscure the fullscreen notification dialog. This ...)
- - firefox <unfixed>
+ - firefox 129.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7518
CVE-2024-42005
- python-django 3:4.2.15-1 (bug #1078074)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99e7d3e71b1006a569e7b887b498b97261714b47
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99e7d3e71b1006a569e7b887b498b97261714b47
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240807/5ad3640f/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list