Lucene search

K
suseSuseSUSE-SU-2015:0704-1
HistoryApr 10, 2015 - 5:04 p.m.

Security update for MozillaFirefox (important)

2015-04-1017:04:55
lists.opensuse.org
10

0.971 High

EPSS

Percentile

99.7%

Mozilla Firefox was updated to 31.6.0 ESR to fix five security issues.

The following vulnerabilities were fixed:

  • Miscellaneous memory safety hazards (MFSA
    2015-30/CVE-2015-0814/CVE-2015-0815)
  • Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA
    2015-31/CVE-2015-0813)
  • resource:// documents can load privileged pages (MFSA
    2015-33/CVE-2015-0816)
  • CORS requests should not follow 30x redirections after preflight (MFSA
    2015-37/CVE-2015-0807)
  • Same-origin bypass through anchor navigation (MFSA 2015-40/CVE-2015-0801)