Skip to content
OpenAdvisories
Unscored RHSA-2015:0988 6 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:38.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:38.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:38.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:38.0-4.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:38.0-4.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:38.0-4.el6_6
Red Hat · RHEL 7 enterprise_linux:7::client firefox 0:38.0-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client firefox-debuginfo 0:38.0-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox 0:38.0-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox-debuginfo 0:38.0-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox 0:38.0-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox-debuginfo 0:38.0-3.el7_1

Vulnerabilities 6

  • Unscored —
    CVE-2015-0797

    GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31…

    gst-plugins-bad0.10 Ubuntu
  • Unscored —
    CVE-2015-2708

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2710

    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2713

    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, an…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2716

    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4496

    Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary…

    firefox Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr31.7
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1220597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1220600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1220601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1220605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1220607
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0988.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0797
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0797
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0797
  • article
    http://www.mozilla.org/security/announce/2015/mfsa2015-47.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-2708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2708
  • article
    http://www.mozilla.org/security/announce/2015/mfsa2015-46.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-2710
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2710
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2710
  • article
    http://www.mozilla.org/security/announce/2015/mfsa2015-48.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-2713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2713
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2713
  • article
    http://www.mozilla.org/security/announce/2015/mfsa2015-51.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-2716
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2716
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2716
  • article
    http://www.mozilla.org/security/announce/2015/mfsa2015-54.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1253550
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4496
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4496
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-93.html