openSUSE: 2016:2639-1 Important: Mozilla Firefox Fix for Crash Issues
opensuse
October 26, 2016
An update that fixes two vulnerabilities is now available
Description
Mozilla Firefox was updated to 49.0.2 to fix two security issues a some
bugs.
The following vulnerabilities were fixed:
* CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
* CVE-2016-5288: Web content can read cache entries (bsc#1006476)
The following changes and fixes are included:
* Asynchronous rendering of the Flash plugins is now enabled by default
* Change D3D9 default fallback preference to prevent graphical artifacts
* Network issue prevents some users from seeing the Firefox UI on startup
* Web compatibility issue with file uploads
* Web compatibility issue with Array.prototype.values
* Diagnostic information on timing for tab switching
* Fix a Canvas filters graphics issue affecting HTML5 apps
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.1:
zypper in -t patch 5723=1
- openSUSE 13.2:
zypper in -t patch 5723=1
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE Leap 42.1 (x86_64):
MozillaFirefox-49.0.2-36.1
MozillaFirefox-branding-upstream-49.0.2-36.1
MozillaFirefox-buildsymbols-49.0.2-36.1
MozillaFirefox-debuginfo-49.0.2-36.1
MozillaFirefox-debugsource-49.0.2-36.1
MozillaFirefox-devel-49.0.2-36.1
MozillaFirefox-translations-common-49.0.2-36.1
MozillaFirefox-translations-other-49.0.2-36.1
- openSUSE 13.2 (i586 x86_64):
MozillaFirefox-49.0.2-84.1
MozillaFirefox-branding-upstream-49.0.2-84.1
MozillaFirefox-buildsymbols-49.0.2-84.1
MozillaFirefox-devel-49.0.2-84.1
MozillaFirefox-translations-common-49.0.2-84.1
MozillaFirefox-translations-other-49.0.2-84.1
- openSUSE 13.2 (x86_64):
MozillaFirefox-debuginfo-49.0.2-84.1
MozillaFirefox-debugsource-49.0.2-84.1
References
https://www.suse.com/security/cve/CVE-2016-5287.html
https://www.suse.com/security/cve/CVE-2016-5288.html
https://bugzilla.suse.com/1006475
https://bugzilla.suse.com/1006476
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2016:2639-1
Rating: important
Affected Products:
openSUSE Leap 42.1
openSUSE 13.2
.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!