Summary
[52.2.0-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
- Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484]
[52.2.0-1]
- Update to 52.2.0 ESR
[52.1.1-1]
- Update to 52.1.1 ESR
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | firefox | 0:52.2.0-1.0.1.el7_3 |
Vulnerabilities 19
-
Unscored —
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attem…
-
Unscored —
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…
-
Unscored —
A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older w…
-
Unscored —
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vuln…
-
Unscored —
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…
-
Unscored —
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerabilit…
-
Unscored —
A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…
-
Unscored —
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is stil…
-
Unscored —
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while …
-
Unscored —
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
-
Unscored —
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
-
Unscored —
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
-
Unscored —CVE-2017-7775 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
-
Unscored —
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…
-
Unscored —
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…