Critical ELSA-2016-1217 6 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Jun 8, 2016 · Updated Jun 8, 2016

Ecosystem: Oracle Linux

Summary

[45.2.0-1.0.1]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat files

[45.2.0-1]
- Update to 45.2.0 ESR

[45.1.1-2]
- Added fix for mozbz#1270046 - new Samba auth response

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:45.2.0-1.0.1.el7_2

Vulnerabilities 6

Unscored —

CVE-2016-2818

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 4…

thunderbird firefox firefox-esr Debian Ubuntu

Jun 13, 2016
Unscored —

CVE-2016-2819 Public exploit EPSS 24%

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to e…

firefox firefox-esr Debian Ubuntu

Jun 13, 2016
Unscored —

CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x bef…

firefox firefox-esr Debian Ubuntu

Jun 13, 2016
Unscored —

CVE-2016-2822

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELE…

firefox firefox-esr Debian Ubuntu

Jun 13, 2016
Unscored —

CVE-2016-2828

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to…

firefox firefox-esr Debian Ubuntu

Jun 13, 2016
Unscored —

CVE-2016-2831

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and po…

firefox firefox-esr Debian Ubuntu

Jun 13, 2016