Skip to content
OpenAdvisories
Critical ELSA-2014-1919 5 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Dec 3, 2014 · Updated Dec 3, 2014

Ecosystem: Oracle Linux

Summary

[31.3.0-4.0.1]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat ones

[31.3.0-4]
- Update to 31.3.0 ESR Build 2
- Fix for geolocation API (rhbz#1063739)

[31.2.0-5]
- splice workaround (rhbz#1150082)

[31.2.0-4]
- ppc build fix (rhbz#1151959)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:31.3.0-4.0.1.el5_11

Vulnerabilities 5

  • Unscored —
    CVE-2014-1587

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1590

    The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird befo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1592

    Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ES…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1593

    Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1594

    Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might all…

    thunderbird firefox Ubuntu