Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

SUSE: 2016:2431-1 Important: DoS Issues in Mozilla Firefox

suse
Calendar Grey October 4, 2016
Dist Suse Esm H88
SUSE has released an update to address critical vulnerabilities found in Mozilla Firefox, reinforcing overall system security.
An update that fixes 12 vulnerabilities is now available

Summary

MozillaFirefox was updated to 45.4.0 ESR to fix the following issues (bsc#999701): The following security issue were fixed: * MFSA 2016-86/CVE-2016-5270: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString * MFSA 2016-86/CVE-2016-5272: Bad cast in nsImageGeometryMixin * MFSA 2016-86/CVE-2016-5276: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList * MFSA 2016-86/CVE-2016-5274: use-after-free in nsFrameManager::CaptureFrameState * MFSA 2016-86/CVE-2016-5277: Heap-use-after-free in nsRefreshDriver::Tick * MFSA 2016-86/CVE-2016-5278: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame * MFSA 2016-86/CVE-2016-5280: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap

References

#999701

Cross- CVE-2016-5250 CVE-2016-5257 CVE-2016-5261

CVE-2016-5270 CVE-2016-5272 CVE-2016-5274

CVE-2016-5276 CVE-2016-5277 CVE-2016-5278

CVE-2016-5280 CVE-2016-5281 CVE-2016-5284

Affected Products:

SUSE Linux Enterprise Server 11-SP2-LTSS

SUSE Linux Enterprise Debuginfo 11-SP2

https://www.suse.com/security/cve/CVE-2016-5250.html

https://www.suse.com/security/cve/CVE-2016-5257.html

https://www.suse.com/security/cve/CVE-2016-5261.html

https://www.suse.com/security/cve/CVE-2016-5270.html

https://www.suse.com/security/cve/CVE-2016-5272.html

https://www.suse.com/security/cve/CVE-2016-5274.html

https://www.suse.com/security/cve/CVE-2016-5276.html

https://www.suse.com/security/cve/CVE-2016-5277.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2431-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here