Updated firefox package fixes security vulnerability

2015-08-2910:53:07

Gentoo Foundation

advisories.mageia.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.245 Low

EPSS

Percentile

96.7%

JSON

Updated firefox packages fix security vulnerabilities: A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2015-4497). A flaw was found in the way Firefox handled installation of add-ons. An attacker could use this flaw to bypass the add-on installation prompt, and trick the user into installing an add-on from a malicious source (CVE-2015-4498).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchfirefox< 38.2.1-1firefox-38.2.1-1.mga4
Mageia4noarchfirefox-l10n< 38.2.1-1firefox-l10n-38.2.1-1.mga4
Mageia4noarchnspr< 4.10.9-1nspr-4.10.9-1.mga4
Mageia4noarchnss< 3.20.0-1nss-3.20.0-1.mga4
Mageia5noarchfirefox< 38.2.1-1firefox-38.2.1-1.mga5
Mageia5noarchfirefox-l10n< 38.2.1-1firefox-l10n-38.2.1-1.mga5
Mageia5noarchnspr< 4.10.9-1nspr-4.10.9-1.mga5
Mageia5noarchnss< 3.20.0-1nss-3.20.0-1.mga5

OS	Version	Architecture	Package	Version	Filename
Mageia	4	noarch	firefox	< 38.2.1-1	firefox-38.2.1-1.mga4
Mageia	4	noarch	firefox-l10n	< 38.2.1-1	firefox-l10n-38.2.1-1.mga4
Mageia	4	noarch	nspr	< 4.10.9-1	nspr-4.10.9-1.mga4
Mageia	4	noarch	nss	< 3.20.0-1	nss-3.20.0-1.mga4
Mageia	5	noarch	firefox	< 38.2.1-1	firefox-38.2.1-1.mga5
Mageia	5	noarch	firefox-l10n	< 38.2.1-1	firefox-l10n-38.2.1-1.mga5
Mageia	5	noarch	nspr	< 4.10.9-1	nspr-4.10.9-1.mga5
Mageia	5	noarch	nss	< 3.20.0-1	nss-3.20.0-1.mga5