Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE 10 SP4: 2014:0905-1 Important: Firefox Memory Hazards

suse
Calendar Grey July 17, 2014
Scroller Suse
A security enhancement for Mozilla Firefox on SUSE addresses 7 vulnerabilities, introduces updated package variants, and improves overall protection.
An update that fixes 7 vulnerabilities is now available

Summary

Mozilla Firefox has been updated to 24.6.0 to fix the following security issues: * Miscellaneous memory safety hazards (CVE-2014-1533/CVE-2014-1534) * Use-after-free and out of bounds issues found using Address Sanitizer (CVE-2014-1536/CVE-2014-1537/CVE-2014-1538) * Use-after-free with SMIL Animation Controller (CVE-2014-1541) mozilla-nspr has been updated to version 4.10.6 to fix one security issue: * Out of bounds write in NSPR (CVE-2014-1545) Further information can be found at https://www.mozilla.org/en-US/security/advisories/ Security Issues: * CVE-2014-1533 * CVE-2014-1534

Topics%20covered

Topics Covered

security advisory update important software fix memory safety mozilla firefox suse linux

References

#881874

Cross- CVE-2014-1533 CVE-2014-1534 CVE-2014-1536

CVE-2014-1537 CVE-2014-1538 CVE-2014-1541

CVE-2014-1545

Affected Products:

SUSE Linux Enterprise Server 10 SP4 LTSS

SUSE Linux Enterprise Server 10 SP3 LTSS

https://www.suse.com/security/cve/CVE-2014-1533.html

https://www.suse.com/security/cve/CVE-2014-1534.html

https://www.suse.com/security/cve/CVE-2014-1536.html

https://www.suse.com/security/cve/CVE-2014-1537.html

https://www.suse.com/security/cve/CVE-2014-1538.html

https://www.suse.com/security/cve/CVE-2014-1541.html

https://www.suse.com/security/cve/CVE-2014-1545.html

https://login.microfocus.com/nidp/app/login?sid=0

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0905-1
Rating: important

Topics%20covered

Topics Covered

security advisory update important software fix memory safety mozilla firefox suse linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.