Advisories » MGASA-2016-0278

Updated firefox packages fix security vulnerability

Publication date: 09 Aug 2016
Modification date: 09 Aug 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-2830 , CVE-2016-2836 , CVE-2016-2837 , CVE-2016-2838 , CVE-2016-5252 , CVE-2016-5254 , CVE-2016-5258 , CVE-2016-5259 , CVE-2016-5262 , CVE-2016-5263 , CVE-2016-5264 , CVE-2016-5265

Description

Multiple flaws were found in the processing of malformed web content. A
web page containing malicious content could cause Firefox to crash or,
potentially, execute arbitrary code with the privileges of the user
running Firefox (CVE-2016-2836, CVE-2016-5258, CVE-2016-5259,
CVE-2016-5252, CVE-2016-5263, CVE-2016-2830, CVE-2016-2838, CVE-2016-5254,
CVE-2016-5262, CVE-2016-5264, CVE-2016-5265, CVE-2016-2837).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19133
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-62/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-63/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-64/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-67/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-70/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-72/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-73/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-76/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-77/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-78/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-79/
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-80/
• https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
• https://rhn.redhat.com/errata/RHSA-2016-1551.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2830
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2838
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5252
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5254
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5258
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5259
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5262
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5263
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5264
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5265

SRPMS

5/core

• firefox-45.3.0-1.mga5
• firefox-l10n-45.3.0-1.mga5
• nss-3.26.0-1.mga5
• rootcerts-20160805.00-1.mga5