Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2014:0727-1 Important: Mozilla Firefox Multiple Threats Resolved

suse
Calendar Grey May 28, 2014
Scroller Suse
Recent enhancements for Mozilla Firefox resolve multiple serious vulnerabilities specific to SUSE Linux Enterprise. Ensure your system remains protected and up to date!
An update that fixes 8 vulnerabilities is now available

Summary

This Mozilla Firefox update provides several security and non-security fixes. MozillaFirefox has been updated to 24.5.0esr, which fixes the following issues: * MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards * MFSA 2014-37/CVE-2014-1523 Out of bounds read while decoding JPG images * MFSA 2014-38/CVE-2014-1524 Buffer overflow when using non-XBL object as XBL * MFSA 2014-42/CVE-2014-1529 Privilege escalation through Web Notification API * MFSA 2014-43/CVE-2014-1530 Cross-site scripting (XSS) using history navigations * MFSA 2014-44/CVE-2014-1531 Use-after-free in imgLoader while resizing images * MFSA 2014-46/CVE-2014-1532 Use-after-free in nsHostResolver Mozilla NSS has been updated to 3.16 * required for Firefox 29

Topics%20covered

Topics Covered

security advisory buffer overflow privilege escalation important multiple threats mozilla firefox suse linux enterprise

References

#869827

Cross- CVE-2014-1492 CVE-2014-1518 CVE-2014-1523

CVE-2014-1524 CVE-2014-1529 CVE-2014-1530

CVE-2014-1531 CVE-2014-1532

Affected Products:

SUSE Linux Enterprise Server 10 SP4 LTSS

https://www.suse.com/security/cve/CVE-2014-1492.html

https://www.suse.com/security/cve/CVE-2014-1518.html

https://www.suse.com/security/cve/CVE-2014-1523.html

https://www.suse.com/security/cve/CVE-2014-1524.html

https://www.suse.com/security/cve/CVE-2014-1529.html

https://www.suse.com/security/cve/CVE-2014-1530.html

https://www.suse.com/security/cve/CVE-2014-1531.html

https://www.suse.com/security/cve/CVE-2014-1532.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0727-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow privilege escalation important multiple threats mozilla firefox suse linux enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.