Skip to content
OpenAdvisories
Critical ELSA-2014-1144 2 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Sep 3, 2014 · Updated Sep 3, 2014

Ecosystem: Oracle Linux

Summary

firefox
[24.8.0-1.0.1.el7_0]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one

[24.8.0-1]
- Update to 24.8.0 ESR

xulrunner
[24.8.0-1.0.1.el7_0]
- Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
- Removed XULRUNNER_VERSION from SOURCE21

[24.8.0-1]
- Update to 24.8.0 ESR

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:24.8.0-2.0.1.el5_10
Oracle Linux · 7 xulrunner 0:24.8.0-1.0.1.el7_0
Oracle Linux · 7 xulrunner-devel 0:24.8.0-1.0.1.el7_0

Vulnerabilities 2

  • Unscored —
    CVE-2014-1562

    Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x b…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1567

    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 an…

    thunderbird firefox Ubuntu