[Git][security-tracker-team/security-tracker][master] Track fixes for firefox for mfsa2024-01 issues fixed via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jan 24 04:51:49 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5e551b8d by Salvatore Bonaccorso at 2024-01-24T05:51:13+01:00
Track fixes for firefox for mfsa2024-01 issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -101,17 +101,17 @@ CVE-2023-44401 (The Silverstripe CMS GraphQL Server serves Silverstripe data as
CVE-2023-42143 (Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8 at 5afc928c ...)
NOT-FOR-US: Shelly
CVE-2024-0755 (Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thun ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0755
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0755
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0755
CVE-2024-0754 (Some WASM source files could have caused a crash when loaded in devtoo ...)
- - firefox <unfixed>
+ - firefox 122.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0754
CVE-2024-0753 (In specific HSTS configurations an attacker could have bypassed HSTS o ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0753
@@ -121,62 +121,62 @@ CVE-2024-0752 (A use-after-free crash could have occurred on macOS if a Firefox
- firefox <not-affected> (Only affects Firefox on MacOS)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0752
CVE-2024-0751 (A malicious devtools extension could have been used to escalate privil ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0751
CVE-2024-0750 (A bug in popup notifications delay calculation could have made it poss ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0750
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0750
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0750
CVE-2024-0749 (A phishing site could have repurposed an `about:` dialog to show phish ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0749
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0749
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0749
CVE-2024-0748 (A compromised content process could have updated the document URI. Thi ...)
- - firefox <unfixed>
+ - firefox 122.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0748
CVE-2024-0747 (When a parent page loaded a child in an iframe with `unsafe-inline`, t ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0747
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0747
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0747
CVE-2024-0746 (A Linux user opening the print preview dialog could have caused the br ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0746
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0746
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0746
CVE-2024-0745 (The WebAudio `OscillatorNode` object was susceptible to a stack buffer ...)
- - firefox <unfixed>
+ - firefox 122.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0745
CVE-2024-0744 (In some circumstances, JIT compiled code could have dereferenced a wil ...)
- - firefox <unfixed>
+ - firefox 122.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0744
CVE-2024-0743 (An unchecked return value in TLS handshake code could have caused a po ...)
- - firefox <unfixed>
+ - firefox 122.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0743
TODO: check src:nss
CVE-2024-0742 (It was possible for certain browser prompts and dialogs to be activate ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0742
CVE-2024-0741 (An out of bounds write in ANGLE could have allowed an attacker to corr ...)
- - firefox <unfixed>
+ - firefox 122.0-1
- firefox-esr <unfixed>
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0741
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e551b8da4c7a27c23be7438dc8bc300218e2257
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e551b8da4c7a27c23be7438dc8bc300218e2257
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240124/fcefc791/attachment.htm>
More information about the debian-security-tracker-commits
mailing list