Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

openSUSE: 2015:1942-1 Important: MozillaFirefox Critical Flaws

opensuse
Calendar Grey November 9, 2015
Dist Opensuse Esm H88
Important openSUSE security notification for Firefox and associated applications, regarding various vulnerabilities and updates now accessible.
An update that fixes 23 vulnerabilities is now available

Description

Mozilla Firefox was updated to version 42.0, fixing bugs and security

issues. Mozilla xulrunner was updated to xulrunner 38.4.0. Seamonkey was

updated to 2.39.

New features in Mozilla Firefox:

* Private Browsing with Tracking Protection blocks certain Web elements

that could be used to record your behavior across sites

* Control Center that contains site security and privacy controls

* Login Manager improvements

* WebRTC improvements

* Indicator added to tabs that play audio with one-click muting

* Media Source Extension for HTML5 video available for all sites

Security fixes:

* MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 Miscellaneous memory safety

hazards

* MFSA 2015-117/CVE-2015-4515 (bmo#1046421) Information disclosure through

NTLM authentication

* MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692) CSP bypass due to

permissive Reader mode whitelist

* MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update critical software patch info disclosure openSUSE MozillaFirefox

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.1:

zypper in -t patch openSUSE-2015-718=1

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-718=1

- openSUSE 13.1:

zypper in -t patch openSUSE-2015-718=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.1 (i586 x86_64):

MozillaFirefox-42.0-3.5

MozillaFirefox-branding-upstream-42.0-3.5

MozillaFirefox-buildsymbols-42.0-3.5

MozillaFirefox-debuginfo-42.0-3.5

MozillaFirefox-debugsource-42.0-3.5

MozillaFirefox-devel-42.0-3.5

MozillaFirefox-translations-common-42.0-3.5

MozillaFirefox-translations-other-42.0-3.5

libfreebl3-3.20.1-3.3

libfreebl3-debuginfo-3.20.1-3.3

libsoftokn3-3.20.1-3.3

libsoftokn3-debuginfo-3.20.1-3.3

mozilla-nspr-4.10.10-4.1

mozilla-nspr-debuginfo-4.10.10-4.1

mozilla-nspr-debugsource-4.10.10-4.1

mozilla-nspr-devel-4.10.10-4.1

mozilla-nss-3.20.1-3.3

mozilla-nss-certs-3.20.1-3.3

mozilla-nss-certs-debuginfo-3.20.1-3.3

mozilla-nss-debuginfo-3.20.1-3.3

mozilla-nss-debugsource-3.20.1-3.3

mozilla-nss-devel-3.20.1-3.3

mozilla-nss-sysinit-3.20.1-3.3

mozilla-nss-sysinit-debuginfo-3.20.1-3.3

mozilla-nss-tools-3.20.1-3.3

mozilla-nss-tools-debuginfo-3.20.1-3.3

seamonkey-2.39-3.1

seamonkey-debuginfo-2.39-3.1

seamonkey-debugsource-2.39-3.1

seamonkey-dom-inspector-2.39-3.1

seamonkey-irc-2.39-3.1

seamo...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2015-4513.html

https://www.suse.com/security/cve/CVE-2015-4514.html

https://www.suse.com/security/cve/CVE-2015-4515.html

https://www.suse.com/security/cve/CVE-2015-4518.html

https://www.suse.com/security/cve/CVE-2015-7181.html

https://www.suse.com/security/cve/CVE-2015-7182.html

https://www.suse.com/security/cve/CVE-2015-7183.html

https://www.suse.com/security/cve/CVE-2015-7185.html

https://www.suse.com/security/cve/CVE-2015-7186.html

https://www.suse.com/security/cve/CVE-2015-7187.html

https://www.suse.com/security/cve/CVE-2015-7188.html

https://www.suse.com/security/cve/CVE-2015-7189.html

https://www.suse.com/security/cve/CVE-2015-7190.html

https://www.suse.com/security/cve/CVE-2015-7191.html

https://www.suse.com/security/cve/CVE-2015-7192.html

https://www.suse.com/security/cve/CVE-2015-7193.html

https://www.suse.com/security/cve/CVE-2015-7194.html

https://www.suse.com/security/cve/CVE-2015-7195.html

https://www.suse.com/security/cve/CVE-2015-7196.html

https://www....

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:1942-1
Rating: important
Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 .

Topics%20covered

Topics Covered

security advisory security update critical software patch info disclosure openSUSE MozillaFirefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here