Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Date: Wed, 25 Jan 2017 15:46:10 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific LinuxFrom: Pat Riehecky Subject: Security ERRATA Critical: firefox on SL5.x, SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Message-ID: <20170125154610.27101.46600@slpackages.fnal.gov> Synopsis: Critical: firefox security update Advisory ID: SLSA-2017:0190-1 Issue Date: 2017-01-25 CVE Numbers: CVE-2017-5373 CVE-2017-5375 CVE-2017-5376 CVE-2017-5378 CVE-2017-5380 CVE-2017-5390 CVE-2017-5396 CVE-2017-5383 CVE-2017-5386 -- This update upgrades Firefox to version 45.7.0 ESR. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-5373, CVE-2017-5375, CVE-2017-5376, CVE-2017-5378, CVE-2017-5380, CVE-2017-5383, CVE-2017-5386, CVE-2017-5390, CVE-2017-5396) -- SL5 x86_64 firefox-45.7.0-1.el5_11.i386.rpm firefox-45.7.0-1.el5_11.x86_64.rpm firefox-debuginfo-45.7.0-1.el5_11.i386.rpm firefox-debuginfo-45.7.0-1.el5_11.x86_64.rpm i386 firefox-45.7.0-1.el5_11.i386.rpm firefox-debuginfo-45.7.0-1.el5_11.i386.rpm SL6 x86_64 firefox-45.7.0-1.el6_8.x86_64.rpm firefox-debuginfo-45.7.0-1.el6_8.x86_64.rpm firefox-45.7.0-1.el6_8.i686.rpm firefox-debuginfo-45.7.0-1.el6_8.i686.rpm i386 firefox-45.7.0-1.el6_8.i686.rpm firefox-debuginfo-45.7.0-1.el6_8.i686.rpm SL7 x86_64 firefox-45.7.0-1.el7_3.x86_64.rpm firefox-debuginfo-45.7.0-1.el7_3.x86_64.rpm firefox-45.7.0-1.el7_3.i686.rpm firefox-debuginfo-45.7.0-1.el7_3.i686.rpm - Scientific Linux Development Team