Red Hat Security AdvisoryRHSA-2015:0718
firefox security update
Released 2015-03-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-31.5.3-1.el5_11, firefox-31.5.3-1.el5_11.i386, firefox-31.5.3-1.el5_11.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) firefox-31.5.3-3.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-31.5.3-3.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-31.5.3-1.el5_11, firefox-31.5.3-1.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-31.5.3-3.ael7b_1, firefox-31.5.3-3.el7_1
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-31.5.3-1.el6_6, firefox-31.5.3-1.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-31.5.3-3.el7_1, firefox-31.5.3-3.el7_1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-31.5.3-3.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-31.5.3-1.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-31.5.3-3.el7_1
Fixes 2 records
Priority LOW 39
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03213 · Published 2015-03-24 · Fixed CWE-264
Priority LOW 36
The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT comp…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03651 · Published 2015-03-24 · Fixed CWE-17
