ELSA-2017-3247 — Critical: firefox security update (Oracle Linux 7)

Summary

[52.5.0-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
- Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484]

[52.5.0-1]
- Update to 52.5.0 ESR

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:52.5.0-1.0.1.el7_4

Vulnerabilities 3

Unscored —

CVE-2017-7826

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7828

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7830

The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violatio…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018

Critical: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 3

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…

The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violatio…