File _patchinfo of Package patchinfo.3449

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.3449

<patchinfo incident="3449">
  <issue id="910669" tracker="bnc">VUL-0: MozillaFirefox 35/31.4.0 security release</issue>
  <issue id="CVE-2014-8637" tracker="cve" />
  <issue id="CVE-2014-8636" tracker="cve" />
  <issue id="CVE-2014-8635" tracker="cve" />
  <issue id="CVE-2014-8634" tracker="cve" />
  <issue id="CVE-2014-8639" tracker="cve" />
  <issue id="CVE-2014-8638" tracker="cve" />
  <issue id="CVE-2014-8642" tracker="cve" />
  <issue id="CVE-2014-8643" tracker="cve" />
  <issue id="CVE-2014-8640" tracker="cve" />
  <issue id="CVE-2014-8641" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>wrosenauer</packager>
  <description>Mozilla seamonkey was updated to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- use GStreamer 1.0 from 13.2 on
</description>
  <summary>Security update for seamonkey</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.3449

Places