Updated firefox package fixes security vulnerability

🗓️ 05 Jul 2015 17:22:03Reported by Gentoo FoundationType

Updated firefox package fixes security vulnerability. Flaws in web content processing, PDF.js, and TLS protocol. NSS client allows ECDHE_ECDSA exchange leading to security implications. NSS and sqlite3 package updates

Reporter	Title	Published	Views	Family All 1183
Ubuntu	2696-1: OpenJDK 7 vulnerabilities	30 Jul 201507:36	–	ubuntu
Ubuntu	USN-2656-1: Firefox vulnerabilities	9 Jul 201520:16	–	ubuntu
Ubuntu	USN-2656-2: Firefox vulnerabilities	15 Jul 201514:52	–	ubuntu
Ubuntu	USN-2672-1: NSS vulnerabilities	9 Jul 201517:32	–	ubuntu
Ubuntu	USN-2673-1: Thunderbird vulnerabilities	20 Jul 201522:04	–	ubuntu
Ubuntu	USN-2696-1: OpenJDK 7 vulnerabilities	30 Jul 201511:36	–	ubuntu
Ubuntu	USN-2706-1: OpenJDK 6 vulnerabilities	6 Aug 201519:06	–	ubuntu
Positive Technologies	PT-2011-1007	11 May 201100:00	–	ptsecurity
Positive Technologies	PT-2011-1174	1 Jan 199900:00	–	ptsecurity
Positive Technologies	PT-2011-4555 · Google +1 · Google Chrome +1	28 Oct 201100:00	–	ptsecurity

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	4	noarch	firefox	38.1.0-1.mga4	firefox-38.1.0-1.mga4.noarch.rpm
Mageia	5	noarch	firefox	38.1.0-1.mga5	firefox-38.1.0-1.mga5.noarch.rpm
Mageia	4	noarch	firefox-l10n	38.1.0-1.mga4	firefox-l10n-38.1.0-1.mga4.noarch.rpm
Mageia	5	noarch	firefox-l10n	38.1.0-1.mga5	firefox-l10n-38.1.0-1.mga5.noarch.rpm
Mageia	4	noarch	nss	3.19.2-1.mga4	nss-3.19.2-1.mga4.noarch.rpm
Mageia	5	noarch	nss	3.19.2-1.mga5	nss-3.19.2-1.mga5.noarch.rpm
Mageia	4	noarch	sqlite3	3.8.10.2-1.mga4	sqlite3-3.8.10.2-1.mga4.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2_release_notes
sqlite	www.sqlite.org/releaselog/3_8_10_2.html
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-59/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-61/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-64/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-65/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-66/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2015-69/

05 Jul 2015 17:22Current

6.9Medium risk

Vulners AI Score6.9

CVSS 210

CVSS 33.7

CVSS 3.13.7

EPSS0.9986

SSVC