summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorJan Beich <jbeich@FreeBSD.org>2015-04-03 23:42:55 +0000
committerJan Beich <jbeich@FreeBSD.org>2015-04-03 23:42:55 +0000
commitfe5c0d4c53b3cade032093d0b7847996f281940f (patch)
tree3f8dd16f77b518e18352545169b20238fb89eb4d /security
parentUpdate Adblock Plus to 2.6.9 (diff)
Document mozilla vulnerabilities in Firefox 37.0
Notes
Notes: svn path=/head/; revision=383181
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml36
1 files changed, 36 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index ef0d1bdf112d..f92f5a278fb0 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -57,6 +57,42 @@ Notes:
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="b8321d76-24e7-4b72-a01d-d12c4445d826">
+ <topic>mozilla -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>firefox</name>
+ <range><lt>37.0.1,1</lt></range>
+ </package>
+ <package>
+ <name>linux-firefox</name>
+ <range><lt>37.0.1,1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Mozilla Project reports:</p>
+ <blockquote cite="https://www.mozilla.org/en-US/security/known-vulnerabilities/">
+ <p>MFSA 2015-44 Certificate verification bypass through the
+ HTTP/2 Alt-Svc header</p>
+ <p>MFSA 2015-43 Loading privileged content through Reader
+ mode</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2015-0798</cvename>
+ <cvename>CVE-2015-0799</cvename>
+ <url>https://www.mozilla.org/security/advisories/mfsa2015-43/</url>
+ <url>https://www.mozilla.org/security/advisories/mfsa2015-44/</url>
+ <url>https://www.mozilla.org/security/advisories/</url>
+ </references>
+ <dates>
+ <discovery>2015-04-03</discovery>
+ <entry>2015-04-04</entry>
+ </dates>
+ </vuln>
+
<vuln vid="2f75141c-da1d-11e4-8d32-5404a68ad561">
<topic>Several vulnerabilities in libav</topic>
<affects>