Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox | 0:45.4.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox-debuginfo | 0:45.4.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox | 0:45.4.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox-debuginfo | 0:45.4.0-1.el5_11 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox-debuginfo | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox-debuginfo | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox-debuginfo | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox-debuginfo | 0:45.4.0-1.el6_8 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox | 0:45.4.0-1.el7_2 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox-debuginfo | 0:45.4.0-1.el7_2 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox | 0:45.4.0-1.el7_2 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox-debuginfo | 0:45.4.0-1.el7_2 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox | 0:45.4.0-1.el7_2 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox-debuginfo | 0:45.4.0-1.el7_2 |
Vulnerabilities 12
-
Unscored —
Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive infor…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4…
-
Unscored —
Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox E…
-
Unscored —
Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.…
-
Unscored —
The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 doe…
-
Unscored —
Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox …
-
Unscored —
Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox b…
-
Unscored —
Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x bef…
-
Unscored —
Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x…
-
Unscored —
Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Fire…
-
Unscored —
Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, an…
-
Unscored —
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates f…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.4
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1361986
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1361998
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377543
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377549
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377552
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377554
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377557
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377558
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377559
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377561
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377563
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1377565
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1912.json
-
report
https://access.redhat.com/security/cve/CVE-2016-5250
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5250
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5250
-
article
https://www.mozilla.org/security/advisories/mfsa2016-84/
-
article
https://www.mozilla.org/security/advisories/mfsa2016-86/
-
report
https://access.redhat.com/security/cve/CVE-2016-5257
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5257
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5257
-
article
https://www.mozilla.org/security/advisories/mfsa2016-85/
-
report
https://access.redhat.com/security/cve/CVE-2016-5261
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5261
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5261
-
article
https://www.mozilla.org/security/advisories/mfsa2016-75/
-
report
https://access.redhat.com/security/cve/CVE-2016-5270
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5270
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5270
-
report
https://access.redhat.com/security/cve/CVE-2016-5272
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5272
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5272
-
report
https://access.redhat.com/security/cve/CVE-2016-5274
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5274
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5274
-
report
https://access.redhat.com/security/cve/CVE-2016-5276
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5276