Skip to content
OpenAdvisories
Critical ELSA-2015-0766 5 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Apr 1, 2015 · Updated Apr 1, 2015

Ecosystem: Oracle Linux

Summary

[31.6.0-2.0.1.el5_11]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat files

[31.6.0-1]
- Update to 31.6.0 ESR Build 2

[31.6.0-1]
- Update to 31.6.0 ESR

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:31.6.0-2.0.1.el7_1
Oracle Linux · 7 xulrunner 0:31.6.0-2.0.1.el7_1
Oracle Linux · 7 xulrunner-devel 0:31.6.0-2.0.1.el7_1

Vulnerabilities 5

  • Unscored —
    CVE-2015-0801

    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0807

    The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird b…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0813

    Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0815

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0816 Public exploit EPSS 65%

    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resourc…

    thunderbird firefox Ubuntu