Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2015:1390-1
HistoryAug 14, 2015 - 7:10 p.m.

Security update for MozillaFirefox (important)

2015-08-1419:10:03
lists.opensuse.org
27

0.968 High

EPSS

Percentile

99.7%

JSON
  • update to Firefox 40.0 (bnc#940806)
    • Added protection against unwanted software downloads
    • Suggested Tiles show sites of interest, based on categories from your
      recent browsing history
    • Hello allows adding a link to conversations to provide context
      on what the conversation will be about
    • New style for add-on manager based on the in-content preferences style
    • Improved scrolling, graphics, and video playback performance with off
      main thread compositing (GNU/Linux only)
    • Graphic blocklist mechanism improved: Firefox version ranges can be
      specified, limiting the number of devices blocked security fixes:
    • MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous memory safety
      hazards
    • MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with
      malformed MP3 file
    • MFSA 2015-81/CVE-2015-4477 (bmo#1179484) Use-after-free in MediaStream
      playback
    • MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of
      non-configurable JavaScript object properties
    • MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 Overflow issues
      in libstagefright
    • MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file overwriting
      through Mozilla Maintenance Service with hard links (only affected
      Windows)
    • MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds write with
      Updater and malicious MAR file (does not affect openSUSE RPM packages
      which do not ship the updater)
    • MFSA 2015-86/CVE-2015-4483 (bmo#1148732) Feed protocol with POST
      bypasses mixed content protections
    • MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared
      memory in JavaScript
    • MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf
      when scaling bitmap images
    • MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
      Buffer overflows on Libvpx when decoding WebM video
    • MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities
      found through code inspection
    • MFSA 2015-91/CVE-2015-4490 (bmo#1086999) Mozilla Content Security
      Policy allows for asterisk wildcards in violation of CSP specification
    • MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in
      XMLHttpRequest with shared workers

    • added mozilla-no-stdcxx-check.patch

    • removed obsolete patches

      • mozilla-add-glibcxx_use_cxx11_abi.patch
      • firefox-multilocale-chrome.patch

    • rebased patches

    • requires version 40 of the branding package

    • removed browser/searchplugins/ location as it’s not valid anymore

    • includes security update to Firefox 39.0.3 (bnc#940918)

      • MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058) Same origin
        violation and local file stealing via PDF reader
OSVersionArchitecturePackageVersionFilename
openSUSE13.1i586mozillafirefox< 40.0-82.1MozillaFirefox-40.0-82.1.i586.rpm
openSUSE13.1i586mozillafirefox-translations-other< 40.0-82.1MozillaFirefox-translations-other-40.0-82.1.i586.rpm
openSUSE13.1x86_64mozillafirefox-translations-common< 40.0-82.1MozillaFirefox-translations-common-40.0-82.1.x86_64.rpm
openSUSE13.1i586mozillafirefox-translations-common< 40.0-82.1MozillaFirefox-translations-common-40.0-82.1.i586.rpm
openSUSE13.1i586mozillafirefox-buildsymbols< 40.0-82.1MozillaFirefox-buildsymbols-40.0-82.1.i586.rpm
openSUSE13.1x86_64mozillafirefox-translations-other< 40.0-82.1MozillaFirefox-translations-other-40.0-82.1.x86_64.rpm
openSUSE13.1x86_64mozillafirefox-branding-opensuse-40< 2.3.1MozillaFirefox-branding-openSUSE-40-2.3.1.x86_64.rpm
openSUSE13.1x86_64mozillafirefox-branding-upstream< 40.0-82.1MozillaFirefox-branding-upstream-40.0-82.1.x86_64.rpm
openSUSE13.1i586mozillafirefox-branding-upstream< 40.0-82.1MozillaFirefox-branding-upstream-40.0-82.1.i586.rpm
openSUSE13.1i586mozillafirefox-debuginfo< 40.0-82.1MozillaFirefox-debuginfo-40.0-82.1.i586.rpm
Rows per page:
1-10 of 181

Related

nessus 44
suse 8
openvas 53
archlinux 2
ibm 3
kaspersky 2
ubuntu 6
freebsd 3
oraclelinux 4
centos 3
mageia 2
veracode 13
redhat 3
debian 1
securityvulns 2
mozilla 7
ubuntucve 6
nvd 7
prion 5
cvelist 6
cve 8
zdt 1
fedora 1
debiancve 2
f5 1
zdi 1
exploitpack 1
attackerkb 1
cisa_kev 1
canvas 1
seebug 1
nessus
nessus
openSUSE Security Update : MozillaFirefox (openSUSE-2015-548)
2015-08-17 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-2015-547)
2015-08-17 00:00:00
Ubuntu 14.04 LTS : Ubufox update (USN-2702-2)
2015-08-12 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2015-08-14 19:09:37
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-10 17:10:07
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-02 12:10:07
openvas
openvas
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:1389-1)
2015-09-18 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:1390-1)
2015-08-15 00:00:00
Ubuntu: Security Advisory (USN-2702-1)
2015-08-12 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-08-12 00:00:00
firefox: local file stealing via PDF reader
2015-08-07 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Firefox affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance
2018-06-17 22:30:13
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox in IBM Storwize V7000 Unified
2018-06-18 00:09:54
Security Bulletin: Mozilla Firefox vulnerability issues in IBM SONAS
2018-06-18 00:09:55
kaspersky
kaspersky
KLA10643 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-08-11 00:00:00
KLA10642 Obtain sensitive information vulnerability in Mozilla Firefox and Firefox ESR
2015-08-06 00:00:00
ubuntu
ubuntu
Ubufox update
2015-08-11 00:00:00
Firefox regression
2015-08-20 00:00:00
Firefox vulnerabilities
2015-08-11 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-08-11 00:00:00
libvpx -- multiple buffer overflows
2015-08-11 00:00:00
mozilla -- multiple vulnerabilities
2015-08-06 00:00:00
oraclelinux
oraclelinux
firefox security update
2015-08-11 00:00:00
thunderbird security update
2015-08-25 00:00:00
firefox security update
2015-08-08 00:00:00
centos
centos
firefox security update
2015-08-11 20:36:44
thunderbird security update
2015-08-25 22:25:27
firefox security update
2015-08-08 08:45:36
mageia
mageia
Updated firefox packages fixes security vulnerabilities
2015-08-11 23:22:53
Updated thunderbird packages fix security vulnerabilities
2015-08-27 23:49:46
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:42:03
Arbitrary Code Execution
2019-05-02 05:41:48
Arbitrary Code Execution
2019-05-02 05:41:48
redhat
redhat
(RHSA-2015:1586) Critical: firefox security update
2015-08-11 00:00:00
(RHSA-2015:1682) Important: thunderbird security update
2015-08-25 00:00:00
(RHSA-2015:1581) Important: firefox security update
2015-08-07 00:00:00
debian
debian
[SECURITY] [DSA 3333-1] iceweasel security update
2015-08-12 10:24:11
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey / Firefox OS multiple security vulnerabilities
2015-08-31 00:00:00
gdk-pixbuf buffer overflow
2015-08-24 00:00:00
mozilla
mozilla
Vulnerabilities found through code inspection — Mozilla
2015-08-11 00:00:00
Overflow issues in libstagefright — Mozilla
2015-08-11 00:00:00
Miscellaneous memory safety hazards (rv:40.0 / rv:38.2) — Mozilla
2015-08-11 00:00:00
ubuntucve
ubuntucve
CVE-2015-4490
2015-08-11 00:00:00
CVE-2015-4474
2015-08-11 00:00:00
CVE-2015-4487
2015-08-11 00:00:00
nvd
nvd
CVE-2015-4481
2015-08-16 01:59:08
CVE-2015-4478
2015-08-16 01:59:05
CVE-2015-4495
2015-08-08 00:59:04
prion
prion
Cross site scripting
2015-08-16 01:59:00
Memory corruption
2015-08-16 01:59:00
Race condition
2015-08-16 01:59:00
cvelist
cvelist
CVE-2015-4490
2015-08-16 01:00:00
CVE-2015-4478
2015-08-16 01:00:00
CVE-2015-4482
2015-08-16 01:00:00
cve
cve
CVE-2015-4495
2015-08-08 00:59:04
CVE-2015-4481
2015-08-16 01:59:08
CVE-2015-4489
2015-08-16 01:59:17
zdt
zdt
Firefox 39.03 - pdf.js Same Origin Policy Exploit
2015-08-15 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-gdk-pixbuf-2.31.6-1.fc22
2015-09-06 04:55:25
debiancve
debiancve
CVE-2015-4491
2015-08-16 01:59:19
CVE-2015-4495
2015-08-08 00:59:04
f5
f5
K76434343 : gdk-pixbuf vulnerability CVE-2015-4491
2017-09-13 00:00:00
zdi
zdi
Mozilla Firefox MPEG4 saio Chunk Integer Overflow Remote Code Execution Vulnerability
2015-10-05 00:00:00
exploitpack
exploitpack
Mozilla Firefox 39.03 - pdf.js Same Origin Policy
2015-08-15 00:00:00
attackerkb
attackerkb
CVE-2015-4495
2015-08-08 00:00:00
cisa_kev
cisa_kev
Mozilla Firefox Security Feature Bypass Vulnerability
2022-05-25 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_PDFJS_FILEREADER
2015-08-08 00:59:00
seebug
seebug
Firefox < 39.0.3 - pdf.js Same Origin Policy Exploit
2015-09-01 00:00:00

0.968 High

EPSS

Percentile

99.7%

JSON
Related for OPENSUSE-SU-2015:1390-1
nessus44suse8openvas53archlinux2ibm3kaspersky2ubuntu6freebsd3oraclelinux4centos3mageia2veracode13redhat3debian1securityvulns2mozilla7ubuntucve6nvd7prion5cvelist6cve8zdt1fedora1debiancve2f51zdi1exploitpack1attackerkb1cisa_kev1canvas1seebug1