Skip to content
OpenAdvisories
Critical ELSA-2015-0988 5 CVEs

Critical: firefox security update (Oracle Linux 7)

Published May 13, 2015 · Updated May 13, 2015

Ecosystem: Oracle Linux

Summary

[38.0-3.0.1.el7_1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[38.0-3]
- Enabled system nss
- Removed unused patches

[38.0-2]
- Update to 38.0 ESR

[38.0b8-0.11]
- Update to 38.0 Beta 8

[38.0b6-0.10]
- Added patch for mozbz#1152515

[38.0b6-0.9]
- Update to 38.0 Beta 6

[38.0b5-0.8]
- Update to 38.0 Beta 5

[38.0b3-0.7]
- Update to 38.0 Beta 3

[38.0b1-0.6]
- Added patch for mozbz#1152391

[38.0b1-0.5]
- Fix build on AArch64 (based on upstream skia changes)

[38.0b1-0.4]
- Enabled debug build

[38.0b1-1]
- Update to 38.0b1

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:38.0-4.0.1.el6_6

Vulnerabilities 5

  • Unscored —
    CVE-2015-0797

    GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31…

    gst-plugins-bad0.10 Ubuntu
  • Unscored —
    CVE-2015-2708

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2710

    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2713

    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, an…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2716

    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before …

    thunderbird firefox Ubuntu