Updated firefox packages fix security vulnerabilities

🗓️ 23 Mar 2015 23:58:37Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 42 Views

Updated firefox 31.5.3 fixes CVE-2015-0817, CVE-2015-081

Reporter	Title	Published	Views	Family All 120
IBM Security Bulletins	Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM Storwize V7000 Unified (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)	18 Jun 201800:09	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Mozilla Firefox vulnerability in IBM SONAS (CVE-2015-0801, CVE-2015-0807, CVE-2015-0813, CVE-2015-0815, CVE-2015-0816,CVE-2015-0817, CVE-2015-0818, CVE-2015-2708, CVE-2015-2709)	18 Jun 201800:09	–	ibm
Tenable Nessus	Mozilla Firefox ESR < 31.5.3 SVG Bypass Privilege Escalation	6 Nov 201900:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 31.5.2 JIT Code Execution	6 Nov 201900:00	–	nessus
Tenable Nessus	Mozilla Firefox < 36.0.4 SVG Bypass Privilege Escalation	10 Apr 201500:00	–	nessus
Tenable Nessus	SeaMonkey < 2.33.1	10 Apr 201500:00	–	nessus
Tenable Nessus	Mozilla Firefox < 36.0.3 JIT Code Execution	10 Apr 201500:00	–	nessus
Tenable Nessus	CentOS 5 / 6 / 7 : firefox (CESA-2015:0718)	26 Mar 201500:00	–	nessus
Tenable Nessus	Debian DSA-3201-1 : iceweasel - security update	24 Mar 201500:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (76ff65f4-17ca-4d3f-864a-a3d6026194fb)	24 Mar 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	4	noarch	firefox	31.5.3-1.mga4	firefox-31.5.3-1.mga4.noarch.rpm
Mageia	4	noarch	firefox-l10n	31.5.3-1.mga4	firefox-l10n-31.5.3-1.mga4.noarch.rpm
Mageia	4	noarch	nss	3.18.0-1.mga4	nss-3.18.0-1.mga4.noarch.rpm
Mageia	4	noarch	rootcerts	20150226.00-1.mga4	rootcerts-20150226.00-1.mga4.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-28/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-29/
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes
mozilla	www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
ubuntu	www.ubuntu.com/usn/usn-2538-1/

23 Mar 2015 23:58Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

EPSS0.03681

firefox security vulnerabilities update cve-2015-0817 cve-2015-0818 javascript svg tls dtls rsa certificate updates