Advisories » MGASA-2016-0158

Updated firefox packages fix security vulnerabilities

Publication date: 29 Apr 2016
Modification date: 29 Apr 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-2805 , CVE-2016-2806 , CVE-2016-2807 , CVE-2016-2808 , CVE-2016-2814

Description

Updated firefox packages fix security vulnerabilities:

Multiple flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Firefox to crash or, potentially,
execute arbitrary code with the privileges of the user running Firefox
(CVE-2016-2805, CVE-2016-2806, CVE-2016-2807, CVE-2016-2808, CVE-2016-2814).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18278
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-39/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-44/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-47/
• https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
• https://rhn.redhat.com/errata/RHSA-2016-0695.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2805
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2807
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2814

SRPMS

5/core

• firefox-38.8.0-1.mga5
• firefox-l10n-38.8.0-1.mga5