Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

openSUSE 15.2: 2023:5420-1 Critical: Firefox Security Patch

opensuse
Calendar Grey November 7, 2013
Dist Opensuse Esm H88
Important security patch available for openSUSE addressing 13 vulnerabilities in Mozilla products. Update immediately to improve security and system reliability.
An update that fixes 13 vulnerabilities is now available

Description

Update NSPR to 4.10.1 Update Thunderbird to 24.1.0 (incl.

enigmail 1.6) Update Firefox to 24.1.0esr

Changes in MozillaFirefox:

* requires NSS 3.15.2 or above

* MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592

Miscellaneous memory safety hazards

* MFSA 2013-94/CVE-2013-5593 (bmo#868327) Spoofing

addressbar through SELECT element

* MFSA 2013-95/CVE-2013-5604 (bmo#914017) Access

violation with XSLT and uninitialized data

* MFSA 2013-96/CVE-2013-5595 (bmo#916580) Improperly

initialized memory and overflows in some JavaScript

functions

* MFSA 2013-97/CVE-2013-5596 (bmo#910881) Writing to

cycle collected object during image decoding

* MFSA 2013-98/CVE-2013-5597 (bmo#918864) Use-after-free

when updating offline cache

* MFSA 2013-99/CVE-2013-5598 (bmo#920515) Security bypass

of PDF.js checks using iframes

* MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601

(bmo#915210, bmo#915576, bmo#916685) Miscellaneous

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory software update important Mozilla threat mitigation memory safety openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch 2013-155

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

MozillaFirefox-24.1.0-91.1

MozillaFirefox-branding-upstream-24.1.0-91.1

MozillaFirefox-buildsymbols-24.1.0-91.1

MozillaFirefox-debuginfo-24.1.0-91.1

MozillaFirefox-debugsource-24.1.0-91.1

MozillaFirefox-devel-24.1.0-91.1

MozillaFirefox-translations-common-24.1.0-91.1

MozillaFirefox-translations-other-24.1.0-91.1

MozillaThunderbird-24.1.0-77.2

MozillaThunderbird-buildsymbols-24.1.0-77.2

MozillaThunderbird-debuginfo-24.1.0-77.2

MozillaThunderbird-debugsource-24.1.0-77.2

MozillaThunderbird-devel-24.1.0-77.2

MozillaThunderbird-translations-common-24.1.0-77.2

MozillaThunderbird-translations-other-24.1.0-77.2

enigmail-1.6.0+24.1.0-77.2

mozilla-nspr-4.10.1-32.1

mozilla-nspr-debuginfo-4.10.1-32.1

mozilla-nspr-debugsource-4.10.1-32.1

mozilla-nspr-devel-4.10.1-32.1

seamonkey-2.22-81.1

seamonkey-debuginfo-2.22-81.1

seamonkey-debugsource-2.22-81.1

seamonkey-dom-inspector-2.22-81.1

seamonkey-irc-2.22-81.1

seamonkey-translations-common-2.22-81.1

seamonkey-translations-other-2.22-81.1

seamonkey-ve...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2013-5590.html

https://www.suse.com/security/cve/CVE-2013-5591.html

https://www.suse.com/security/cve/CVE-2013-5592.html

https://www.suse.com/security/cve/CVE-2013-5593.html

https://www.suse.com/security/cve/CVE-2013-5595.html

https://www.suse.com/security/cve/CVE-2013-5596.html

https://www.suse.com/security/cve/CVE-2013-5597.html

https://www.suse.com/security/cve/CVE-2013-5599.html

https://www.suse.com/security/cve/CVE-2013-5600.html

https://www.suse.com/security/cve/CVE-2013-5601.html

https://www.suse.com/security/cve/CVE-2013-5602.html

https://www.suse.com/security/cve/CVE-2013-5603.html

https://www.suse.com/security/cve/CVE-2013-5604.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2013:1634-1
Rating: important
Affected Products: openSUSE 11.4 .

Topics%20covered

Topics Covered

security advisory software update important Mozilla threat mitigation memory safety openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here