RHSA-2015:1982Critical

Red Hat Security Advisory: firefox security update

Published
November 4, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (10)

CVE-2015-4513 →CVE-2015-7188 →CVE-2015-7189 →CVE-2015-7193 →CVE-2015-7194 →CVE-2015-7196 →CVE-2015-7197 →CVE-2015-7198 →CVE-2015-7199 →CVE-2015-7200 →

📋 Description

CVE-2015-4513 — Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116) CVE-2015-7188 — Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122) CVE-2015-7189 — Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123) CVE-2015-7193 — Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127) CVE-2015-7194 — Mozilla: Memory corruption in libjar through zip files (MFSA 2015-128) CVE-2015-7196 — Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130) CVE-2015-7197 — Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132) CVE-2015-7198 — Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131) CVE-2015-7199 — Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131) CVE-2015-7200 — Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)

🎯 Affected products91

  • Red Hat Enterprise Linux (v. 5 server)
  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 5 client)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • firefox-0:38.4.0-1.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • firefox-0:38.4.0-1.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • firefox-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.4.0-1.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • firefox-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • firefox-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • firefox-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • +61 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (12)