Security update for MozillaFirefox SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0978-1 Final 1 1 2015-05-19T09:15:45Z current 2015-05-19T09:15:45Z 2015-05-19T09:15:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MozillaFirefox This update to Firefox 31.7.0 ESR fixes the following issues: * MFSA 2015-46 (CVE-2015-2708, CVE-2015-2709): Miscellaneous memory safety hazards (rv:38.0 / rv:31.7). Upstream references: bmo#1120655, bmo#1143299, bmo#1151139, bmo#1152177, bmo#1111251, bmo#1117977, bmo#1128064, bmo#1135066, bmo#1143194, bmo#1146101, bmo#1149526, bmo#1153688, bmo#1155474. * MFSA 2015-47 (CVE-2015-0797): Buffer overflow parsing H.264 video with Linux Gstreamer. Upstream references: bmo#1080995. * MFSA 2015-48 (CVE-2015-2710): Buffer overflow with SVG content and CSS. Upstream references: bmo#1149542. * MFSA 2015-51 (CVE-2015-2713): Use-after-free during text processing with vertical text enabled. Upstream references: bmo#1153478. * MFSA 2015-54 (CVE-2015-2716): Buffer overflow when parsing compressed XML. Upstream references: bmo#1140537. Security Issues: * CVE-2015-0797 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0797> * CVE-2015-2708 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708> * CVE-2015-2709 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709> * CVE-2015-2710 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710> * CVE-2015-2713 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713> * CVE-2015-2716 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-firefox-20150510,sledsp3-firefox-20150510,slessp3-firefox-20150510 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ Link for SUSE-SU-2015:0978-1 https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html E-Mail link for SUSE-SU-2015:0978-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/930622 SUSE Bug 930622 https://www.suse.com/security/cve/CVE-2015-0797/ SUSE CVE CVE-2015-0797 page https://www.suse.com/security/cve/CVE-2015-2708/ SUSE CVE CVE-2015-2708 page https://www.suse.com/security/cve/CVE-2015-2709/ SUSE CVE CVE-2015-2709 page https://www.suse.com/security/cve/CVE-2015-2710/ SUSE CVE CVE-2015-2710 page https://www.suse.com/security/cve/CVE-2015-2713/ SUSE CVE CVE-2015-2713 page https://www.suse.com/security/cve/CVE-2015-2716/ SUSE CVE CVE-2015-2716 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 MozillaFirefox-devel-31.7.0esr-0.8.1 MozillaFirefox-31.7.0esr-0.8.1 MozillaFirefox-translations-31.7.0esr-0.8.1 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 MozillaFirefox-devel-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file. CVE-2015-0797 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-0797.html CVE-2015-0797 https://bugzilla.suse.com/927559 SUSE Bug 927559 https://bugzilla.suse.com/930622 SUSE Bug 930622 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. CVE-2015-2708 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-2708.html CVE-2015-2708 https://bugzilla.suse.com/930622 SUSE Bug 930622 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. CVE-2015-2709 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-2709.html CVE-2015-2709 https://bugzilla.suse.com/930622 SUSE Bug 930622 Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence. CVE-2015-2710 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-2710.html CVE-2015-2710 https://bugzilla.suse.com/930622 SUSE Bug 930622 Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text. CVE-2015-2713 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-2713.html CVE-2015-2713 https://bugzilla.suse.com/930622 SUSE Bug 930622 Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283. CVE-2015-2716 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-31.7.0esr-0.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/ https://www.suse.com/security/cve/CVE-2015-2716.html CVE-2015-2716 https://bugzilla.suse.com/930622 SUSE Bug 930622 https://bugzilla.suse.com/939077 SUSE Bug 939077 https://bugzilla.suse.com/980391 SUSE Bug 980391 https://bugzilla.suse.com/983985 SUSE Bug 983985