Skip to content
OpenAdvisories
Critical ELSA-2014-1635 6 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Oct 15, 2014 · Updated Oct 15, 2014

Ecosystem: Oracle Linux

Summary

firefox
[31.2.0-3.0.1.el7_0]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one

[31.2.0-3]
- Update to 31.2.0 ESR
- Fix for mozbz#1042889

[31.1.0-7]
- Enable WebM on all arches

xulrunner
[31.2.0-1.0.1]
- Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
- Removed XULRUNNER_VERSION from SOURCE21

[31.2.0-1]
- Update to 31.2.0

[31.1.0-3]
- move /sdk/bin to xulrunner libdir

[31.1.0-2]
- Sync preferences with Firefox package

[31.1.0-1]
- Update to 31.1.0 ESR

[31.0-2]
- Fix header wrapper for aarch64

[31.0-1]
- Update to 31.0 ESR

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:31.2.0-3.0.1.el7_0
Oracle Linux · 7 xulrunner 0:31.2.0-1.0.1.el7_0
Oracle Linux · 7 xulrunner-devel 0:31.2.0-1.0.1.el7_0

Vulnerabilities 6

  • Unscored —
    CVE-2014-1574

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1576

    Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1577

    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1578

    The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 al…

    thunderbird firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2014-1581

    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1583

    The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, …

    firefox Ubuntu