Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox | 0:45.5.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox-debuginfo | 0:45.5.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox | 0:45.5.0-1.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox-debuginfo | 0:45.5.0-1.el5_11 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox-debuginfo | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox-debuginfo | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox-debuginfo | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox-debuginfo | 0:45.5.0-1.el6_8 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox | 0:45.5.0-1.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox-debuginfo | 0:45.5.0-1.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox | 0:45.5.0-1.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox-debuginfo | 0:45.5.0-1.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox | 0:45.5.0-1.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox-debuginfo | 0:45.5.0-1.el7_3 |
Vulnerabilities 6
-
Unscored —
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corru…
-
Unscored —
A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability aff…
-
Unscored —
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially…
-
Unscored —
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking iss…
-
Unscored —
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated…
-
Unscored —
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amou…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.5
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395055
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395058
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395060
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395061
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395065
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395066
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2780.json
-
report
https://access.redhat.com/security/cve/CVE-2016-5290
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5290
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5290
-
article
https://www.mozilla.org/security/announce/2016/mfsa2016-90.html
-
report
https://access.redhat.com/security/cve/CVE-2016-5291
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5291
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5291
-
article
https://www.mozilla.org/security/announce/2016/mfsa2016-89.html
-
report
https://access.redhat.com/security/cve/CVE-2016-5296
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5296
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5296
-
report
https://access.redhat.com/security/cve/CVE-2016-5297
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5297
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5297
-
report
https://access.redhat.com/security/cve/CVE-2016-9064
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-9064
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-9064
-
report
https://access.redhat.com/security/cve/CVE-2016-9066
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-9066
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-9066