Skip to content
OpenAdvisories
Critical ELSA-2015-1586 14 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Aug 11, 2015 · Updated Aug 11, 2015

Ecosystem: Oracle Linux

Summary

[38.2.0-4.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
- Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484]

[38.2.0-4]
- Update to 38.2.0 ESR

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:38.2.0-4.0.1.el7_1

Vulnerabilities 14

  • Unscored —
    CVE-2015-4473

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4475

    The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4478

    Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScr…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4479

    Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remo…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4480

    Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4484

    The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4485

    Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox …

    firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2015-4486

    The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote…

    firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2015-4487

    The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS bef…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4488

    Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4489

    The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4491

    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla F…

    thunderbird firefox gdk-pixbuf gdk-pixbuf Debian Ubuntu
  • Unscored —
    CVE-2015-4492

    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR …

    firefox Ubuntu
  • Unscored —
    CVE-2015-4493

    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox be…

    firefox Ubuntu