Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2014:0665-3 Critical: Firefox Security Vulnerabilities

suse
Calendar Grey May 28, 2014
Scroller Suse
SUSE unveils crucial security patch resolving 8 major vulnerabilities in Mozilla Firefox. Discover insights on the enhancements and updates currently accessible.
An update that fixes 8 vulnerabilities is now available

Summary

This Mozilla Firefox update provides several security and non-security fixes. Mozilla Firefox has been updated to the 24.5.0esr version, which fixes the following issues: * MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards * MFSA 2014-37/CVE-2014-1523 Out of bounds read while decoding JPG images * MFSA 2014-38/CVE-2014-1524 Buffer overflow when using non-XBL object as XBL * MFSA 2014-42/CVE-2014-1529 Privilege escalation through Web Notification API * MFSA 2014-43/CVE-2014-1530 Cross-site scripting (XSS) using history navigations * MFSA 2014-44/CVE-2014-1531 Use-after-free in imgLoader while resizing images * MFSA 2014-46/CVE-2014-1532 Use-after-free in nsHostResolver Mozilla NSS has been updated to version 3.16 * required for Firefox 29

Topics%20covered

Topics Covered

security advisory software update security fix important memory safety Mozilla Firefox SUSE Linux Enterprise

References

#865539 #869827 #875378

Cross- CVE-2014-1492 CVE-2014-1518 CVE-2014-1523

CVE-2014-1524 CVE-2014-1529 CVE-2014-1530

CVE-2014-1531 CVE-2014-1532

Affected Products:

SUSE Linux Enterprise Server 10 SP3 LTSS

https://www.suse.com/security/cve/CVE-2014-1492.html

https://www.suse.com/security/cve/CVE-2014-1518.html

https://www.suse.com/security/cve/CVE-2014-1523.html

https://www.suse.com/security/cve/CVE-2014-1524.html

https://www.suse.com/security/cve/CVE-2014-1529.html

https://www.suse.com/security/cve/CVE-2014-1530.html

https://www.suse.com/security/cve/CVE-2014-1531.html

https://www.suse.com/security/cve/CVE-2014-1532.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0665-2
Rating: important

Topics%20covered

Topics Covered

security advisory software update security fix important memory safety Mozilla Firefox SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.