Updated firefox & thunderbird packages fix multiple security vulnerabilities

2014-06-1121:13:59

Gentoo Foundation

advisories.mageia.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.089 Low

EPSS

Percentile

94.5%

JSON

Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1533, CVE-2014-1538, CVE-2014-1541).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchrootcerts< 20140401.00-1rootcerts-20140401.00-1.mga3
Mageia3noarchnspr< 4.10.6-1nspr-4.10.6-1.mga3
Mageia3noarchnss< 3.16.1-1nss-3.16.1-1.mga3
Mageia3noarchfirefox< 24.6.0-1firefox-24.6.0-1.mga3
Mageia3noarchfirefox-l10n< 24.6.0-1firefox-l10n-24.6.0-1.mga3
Mageia3noarchthunderbird< 24.6.0-1thunderbird-24.6.0-1.mga3
Mageia3noarchthunderbird-l10n< 24.6.0-1thunderbird-l10n-24.6.0-1.mga3
Mageia4noarchrootcerts< 20140401.00-1rootcerts-20140401.00-1.mga4
Mageia4noarchnspr< 4.10.6-1nspr-4.10.6-1.mga4
Mageia4noarchnss< 3.16.1-1nss-3.16.1-1.mga4

OS	Version	Architecture	Package	Version	Filename
Mageia	3	noarch	rootcerts	< 20140401.00-1	rootcerts-20140401.00-1.mga3
Mageia	3	noarch	nspr	< 4.10.6-1	nspr-4.10.6-1.mga3
Mageia	3	noarch	nss	< 3.16.1-1	nss-3.16.1-1.mga3
Mageia	3	noarch	firefox	< 24.6.0-1	firefox-24.6.0-1.mga3
Mageia	3	noarch	firefox-l10n	< 24.6.0-1	firefox-l10n-24.6.0-1.mga3
Mageia	3	noarch	thunderbird	< 24.6.0-1	thunderbird-24.6.0-1.mga3
Mageia	3	noarch	thunderbird-l10n	< 24.6.0-1	thunderbird-l10n-24.6.0-1.mga3
Mageia	4	noarch	rootcerts	< 20140401.00-1	rootcerts-20140401.00-1.mga4
Mageia	4	noarch	nspr	< 4.10.6-1	nspr-4.10.6-1.mga4
Mageia	4	noarch	nss	< 3.16.1-1	nss-3.16.1-1.mga4