Skip to content
OpenAdvisories
Unscored RHSA-2015:1693 2 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:38.2.1-1.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:38.2.1-1.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:38.2.1-1.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:38.2.1-1.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:38.2.1-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:38.2.1-1.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client firefox 0:38.2.1-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client firefox-debuginfo 0:38.2.1-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox 0:38.2.1-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox-debuginfo 0:38.2.1-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox 0:38.2.1-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox-debuginfo 0:38.2.1-1.el7_1

Vulnerabilities 2

  • Unscored —
    CVE-2015-4497

    Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefo…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4498

    The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attac…

    firefox Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr38.2.1
  • article
    https://access.redhat.com/articles/1590693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1257276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1257278
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1693.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-4497
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4497
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4497
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-94.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4498
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4498
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4498
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-95.html