Skip to content
OpenAdvisories
Critical ELSA-2015-1982 8 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Nov 4, 2015 · Updated Nov 4, 2015

Ecosystem: Oracle Linux

Summary

[38.4.0-1.0.1.el5_11]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat files

[38.4.0-1]
- Update to 38.4.0 ESR

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 firefox 0:38.4.0-1.0.1.el7_1

Vulnerabilities 8

  • Unscored —
    CVE-2015-4513

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7188

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy fo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7189

    Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remot…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7193

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7194

    Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to c…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7196

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to …

    firefox Ubuntu
  • Unscored —
    CVE-2015-7197

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7198

    Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x…

    thunderbird firefox Ubuntu