Critical ELSA-2015-0046 4 CVEs

Critical: firefox security and bug fix update (Oracle Linux 7)

Published Jan 14, 2015 · Updated Jan 14, 2015

Ecosystem: Oracle Linux

Summary

[31.4.0-1.0.1]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat files

[31.4.0-1]
- Update to 31.4.0 ESR

[31.3.0-9]
- Fixed problems with dictionaries (mozbz#1097550)
- Fixed rhbz#1164855 - firefox.desktop is missing
x-scheme-handler MimeType entries

[31.3.0-7]
- Added Python 2.7 to build Firefox

[31.3.0-6]
- ia64 fix (mozbz#1093278)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:31.4.0-1.0.1.el7_0
Oracle Linux · 7	xulrunner	0:31.4.0-1.0.1.el7_0
Oracle Linux · 7	xulrunner-devel	0:31.4.0-1.0.1.el7_0

Vulnerabilities 4

Unscored —

CVE-2014-8634

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4…

thunderbird firefox Ubuntu

Jan 14, 2015
Unscored —

CVE-2014-8638

The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird befor…

thunderbird firefox Ubuntu

Jan 14, 2015
Unscored —

CVE-2014-8639

Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not pr…

thunderbird firefox Ubuntu

Jan 14, 2015
Unscored —

CVE-2014-8641

Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4,…

firefox Ubuntu

Jan 14, 2015