Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57d71f63 by Salvatore Bonaccorso at 2024-07-10T06:42:08+02:00
Track fixed version for firefox-esr issues from /mfsa2024-30
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -706,23 +706,23 @@ CVE-2024-6605 (Firefox Android allowed immediate
interaction with permission pro
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6605
CVE-2024-6604 (Memory safety bugs present in Firefox 127, Firefox ESR 115.12,
and Thu ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.13.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6604
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6604
CVE-2024-6603 (In an out-of-memory scenario an allocation could fail but free
would h ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.13.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6603
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6603
CVE-2024-6602 (A mismatch between allocator and deallocator could have lead to
memory ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.13.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6602
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6602
TODO: check how its related to src:nss and if src:nss tracking is
necessary
CVE-2024-6601 (A race condition could lead to a cross-origin container
obtaining perm ...)
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.13.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6601
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6601
CVE-2024-6600 (Due to large allocation checks in Angle for GLSL shaders being
too len ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d71f63a6fb1033d66b4d92c25c4fb7cbb04adb
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d71f63a6fb1033d66b4d92c25c4fb7cbb04adb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
