Lucene search

K
suseSuseSUSE-SU-2014:1458-3
HistoryNov 24, 2014 - 7:05 p.m.

Security update for MozillaFirefox (important)

2014-11-2419:05:36
lists.opensuse.org
6

0.14 Low

EPSS

Percentile

95.1%

This version update of Mozilla Firefox to 31.2.0ESR brings improvements,
stability fixes and also security fixes for the following CVEs:

CVE-2014-1574, CVE-2014-1575, CVE-2014-1576 ,CVE-2014-1577, CVE-2014-1578,
CVE-2014-1581, CVE-2014-1583, CVE-2014-1585, CVE-2014-1586

It also disables SSLv3 by default to mitigate the protocol downgrade
attack known as POODLE.

Security Issues:

   * CVE-2014-1574
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1574">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1574</a>&gt;
   * CVE-2014-1575
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1575">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1575</a>&gt;
   * CVE-2014-1576
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1576">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1576</a>&gt;
   * CVE-2014-1577
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1577">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1577</a>&gt;
   * CVE-2014-1578
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1578">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1578</a>&gt;
   * CVE-2014-1581
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581</a>&gt;
   * CVE-2014-1583
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1583">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1583</a>&gt;
   * CVE-2014-1585
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585</a>&gt;
   * CVE-2014-1586
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1586">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1586</a>&gt;