2015-08-31
ALT-BU-2015-2611-1
Branch sisyphus update bulletin.
Package firefox-esr updated to version 38.2.1-alt1 for branch sisyphus in task 148523.
Closed vulnerabilities
Published: 2015-08-29
BDU:2015-11311
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
Severity: CRITICAL (10.0)
References:
Published: 2015-08-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Severity: CRITICAL (10.0)
References:
- SUSE-SU-2015:1504
- SUSE-SU-2015:1504
- SUSE-SU-2015:2081
- SUSE-SU-2015:2081
- openSUSE-SU-2015:1492
- openSUSE-SU-2015:1492
- RHSA-2015:1693
- RHSA-2015:1693
- DSA-3345
- DSA-3345
- http://www.mozilla.org/security/announce/2015/mfsa2015-94.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-94.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- 76502
- 76502
- 1033397
- 1033397
- USN-2723-1
- USN-2723-1
- http://www.zerodayinitiative.com/advisories/ZDI-15-406
- http://www.zerodayinitiative.com/advisories/ZDI-15-406
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164766
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164766
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175278
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175278
No data currently available.
No data currently available.