Skip to content
OpenAdvisories
Unscored RHSA-2012:0079 5 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.26-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.26-2.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.6.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.6.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.26-1.el5_7
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.26-1.el5_7
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:3.6.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:1.9.2.26-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:1.9.2.26-1.el6_2

Vulnerabilities 5

  • Unscored —
    CVE-2011-3659 Public exploit EPSS 37%

    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 th…

  • Unscored —
    CVE-2011-3670

    Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before …

  • Unscored —
    CVE-2012-0442

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunde…

  • Unscored —
    CVE-2012-0444

    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before …

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2012-0449

    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.26
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785085
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=786026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=786258
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0079.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3659
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3659
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3659
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-04.html
  • report
    https://access.redhat.com/security/cve/CVE-2011-3670
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3670
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3670
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-02.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-0442
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0442
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0442
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-0444
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0444
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0444
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-07.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-0449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0449
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-08.html