Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 509188

Summary: <mail-client/thunderbird{,-bin}-24.5, <www-client/firefox{,-bin}-24.5, <www-client/seamonkey{,-bin}-2.26: multiple vulnerabilities
Product: Gentoo Security Reporter: Alex Xu (Hello71) <alex_y_xu>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED DUPLICATE    
Severity: major CC: forreg, mozilla
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: A2 [ebuild]
Package list:
Runtime testing required: ---

Description Alex Xu (Hello71) 2014-04-30 15:06:13 UTC
April 29, 2014

MFSA 2014-47 Debugger can bypass XrayWrappers with JavaScript
MFSA 2014-46 Use-after-free in nsHostResolve
MFSA 2014-45 Incorrect IDNA domain name matching for wildcard certificates
MFSA 2014-44 Use-after-free in imgLoader while resizing images
MFSA 2014-43 Cross-site scripting (XSS) using history navigations
MFSA 2014-42 Privilege escalation through Web Notification API
MFSA 2014-41 Out-of-bounds write in Cairo
MFSA 2014-40 Firefox for Android addressbar suppression
MFSA 2014-39 Use-after-free in the Text Track Manager for HTML video
MFSA 2014-38 Buffer overflow when using non-XBL object as XBL
MFSA 2014-37 Out of bounds read while decoding JPG images
MFSA 2014-36 Web Audio memory corruption issues
MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer
MFSA 2014-34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)
Comment 1 Alex Xu (Hello71) 2014-04-30 15:07:09 UTC
*** Bug 509050 has been marked as a duplicate of this bug. ***
Comment 2 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2014-04-30 15:37:37 UTC

*** This bug has been marked as a duplicate of bug 509050 ***
Comment 3 Thomas Capricelli 2014-04-30 17:29:05 UTC
Why have i been added to this ? I dont care about this ticket..?