Critical ELSA-2016-0197 3 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Feb 16, 2016 · Updated Feb 16, 2016

Ecosystem: Oracle Linux

Summary

[38.6.1-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[38.6.1-1]
- Update to 38.6.1 ESR

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:38.6.1-1.0.1.el7_2

Vulnerabilities 3

Unscored —

CVE-2016-1521

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 …

graphite2 graphite2 Debian Ubuntu

Feb 13, 2016
Unscored —

CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1,…

graphite2 graphite2 Debian Ubuntu

Feb 13, 2016
Unscored —

CVE-2016-1523

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before …

thunderbird graphite2 graphite2 Debian Ubuntu

Feb 13, 2016