Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE: 2014:0638-2 Important: Mozilla Firefox Memory Safety Fixes

suse
Calendar Grey May 16, 2014
Scroller Suse
SUSE Security Patch for Mozilla Firefox addresses various vulnerabilities. Prompt updates are advised.
An update that fixes 8 vulnerabilities is now available

Summary

This MozillaFirefox and mozilla-nss update fixes several security and non-security issues. MozillaFirefox has been updated to version 24.5.0esr which fixes the following issues: * MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards * MFSA 2014-37/CVE-2014-1523 Out of bounds read while decoding JPG images * MFSA 2014-38/CVE-2014-1524 Buffer overflow when using non-XBL object as XBL * MFSA 2014-42/CVE-2014-1529 Privilege escalation through Web Notification API * MFSA 2014-43/CVE-2014-1530 Cross-site scripting (XSS) using history navigations * MFSA 2014-44/CVE-2014-1531 Use-after-free in imgLoader while resizing images * MFSA 2014-46/CVE-2014-1532 Use-after-free in nsHostResolver Mozilla NSS has been updated to version 3.16 * required for Firefox 29

Topics%20covered

Topics Covered

security advisory software update important exploit fix SUSE memory safety Mozilla Firefox

References

#865539 #869827 #875378 #875803

Cross- CVE-2014-1518 CVE-2014-1520 CVE-2014-1523

CVE-2014-1524 CVE-2014-1529 CVE-2014-1530

CVE-2014-1531 CVE-2014-1532

Affected Products:

SUSE Linux Enterprise Server 11 SP2 LTSS

https://www.suse.com/security/cve/CVE-2014-1518.html

https://www.suse.com/security/cve/CVE-2014-1520.html

https://www.suse.com/security/cve/CVE-2014-1523.html

https://www.suse.com/security/cve/CVE-2014-1524.html

https://www.suse.com/security/cve/CVE-2014-1529.html

https://www.suse.com/security/cve/CVE-2014-1530.html

https://www.suse.com/security/cve/CVE-2014-1531.html

https://www.suse.com/security/cve/CVE-2014-1532.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0638-2
Rating: important

Topics%20covered

Topics Covered

security advisory software update important exploit fix SUSE memory safety Mozilla Firefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.