Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0564-1

Опубликовано: 24 фев. 2016
Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • update to Firefox 38.6.1 ESR (bsc#967087)
    • MFSA 2016-14/CVE-2016-1523 (bmo#1246093) Vulnerabilities in Graphite 2

Список пакетов

SUSE Linux Enterprise Desktop 11 SP4
MozillaFirefox-38.6.1esr-34.1
MozillaFirefox-translations-38.6.1esr-34.1
SUSE Linux Enterprise Server 11 SP4
MozillaFirefox-38.6.1esr-34.1
MozillaFirefox-translations-38.6.1esr-34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
MozillaFirefox-38.6.1esr-34.1
MozillaFirefox-translations-38.6.1esr-34.1
SUSE Linux Enterprise Software Development Kit 11 SP4
MozillaFirefox-devel-38.6.1esr-34.1

Ссылки

Описание

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP4:MozillaFirefox-38.6.1esr-34.1
SUSE Linux Enterprise Desktop 11 SP4:MozillaFirefox-translations-38.6.1esr-34.1
SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-38.6.1esr-34.1
SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-38.6.1esr-34.1
Ссылки