Skip to content
OpenAdvisories
Critical ELSA-2015-0265 4 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Feb 25, 2015 · Updated Feb 25, 2015

Ecosystem: Oracle Linux

Summary

firefox
[31.5.0-2.0.1.el7_0]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[31.5.0-2]
- Update to 31.5.0 ESR Build 2

xulrunner
[31.5.0-1.0.1-el7_0]
- Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
- Removed XULRUNNER_VERSION from SOURCE21

[31.5.0-1]
- Update to 31.5.0 ESR

[31.4.0-2]
- Added -std=gnu++0x to libxul library build flags (rhbz#1170226)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:31.5.0-2.0.1.el7_0
Oracle Linux · 7 xulrunner 0:31.5.0-1.0.1.el7_0
Oracle Linux · 7 xulrunner-devel 0:31.5.0-1.0.1.el7_0

Vulnerabilities 4

  • Unscored —
    CVE-2015-0822

    The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0827

    Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x befo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0831

    Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox be…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0836

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5…

    thunderbird firefox Ubuntu