From 1d508e38de59f0cd67c052a8ae0fb16b67ab95bd Mon Sep 17 00:00:00 2001 From: Tom Ritter Date: Fri, 10 May 2024 17:12:51 -0400 Subject: [PATCH] Small fixes --- announce/2024/mfsa2024-21.yml | 8 ++++---- announce/2024/mfsa2024-22.yml | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/announce/2024/mfsa2024-21.yml b/announce/2024/mfsa2024-21.yml index 5d63f76..34e1a55 100644 --- a/announce/2024/mfsa2024-21.yml +++ b/announce/2024/mfsa2024-21.yml @@ -26,7 +26,7 @@ advisories: impact: moderate reporter: Dana Keeler description: | - Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another applications manifest. This could have been exploited to run arbitrary code in another applications context.
*This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* + Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context.
*This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* bugs: - url: 1871109 CVE-2024-4766: @@ -39,11 +39,11 @@ advisories: - url: 1871214 - url: 1871217 CVE-2024-4767: - title: IndexDB files retained in private browsing mode + title: IndexedDB files retained in private browsing mode impact: moderate reporter: Kim Do Hun via Tor Browser description: | - If the browser.privatebrowsing.autostart preference is enabled, IndexDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. + If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. bugs: - url: 1878577 CVE-2024-4768: @@ -55,7 +55,7 @@ advisories: bugs: - url: 1886082 CVE-2024-4769: - title: Cross-Origin responses could be distinguished between script and non-script content-types + title: Cross-origin responses could be distinguished between script and non-script content-types impact: moderate reporter: Shaheen Fazim description: | diff --git a/announce/2024/mfsa2024-22.yml b/announce/2024/mfsa2024-22.yml index bac1227..7323863 100644 --- a/announce/2024/mfsa2024-22.yml +++ b/announce/2024/mfsa2024-22.yml @@ -14,11 +14,11 @@ advisories: bugs: - url: 1893645 CVE-2024-4767: - title: IndexDB files retained in private browsing mode + title: IndexedDB files retained in private browsing mode impact: moderate reporter: Kim Do Hun via Tor Browser description: | - If the browser.privatebrowsing.autostart preference is enabled, IndexDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. + If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. bugs: - url: 1878577 CVE-2024-4768: @@ -30,7 +30,7 @@ advisories: bugs: - url: 1886082 CVE-2024-4769: - title: Cross-Origin responses could be distinguished between script and non-script content-types + title: Cross-origin responses could be distinguished between script and non-script content-types impact: moderate reporter: Shaheen Fazim description: |