File _patchinfo of Package patchinfo.4974

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.4974

<patchinfo incident="4974">
<issue id="1035082" tracker="bnc">VUL-0: MozillaFirefox 53 / 45.9 release</issue>
<issue id="1043960" tracker="bnc">VUL-0: MozillaFirefox: 54/52.2 security release</issue>
<issue id="2017-7758" tracker="cve" />
<issue id="2017-7778" tracker="cve" />
<issue id="2017-7763" tracker="cve" />
<issue id="2017-5467" tracker="cve" />
<issue id="2017-5466" tracker="cve" />
<issue id="2017-5464" tracker="cve" />
<issue id="2017-5429" tracker="cve" />
<issue id="2017-5465" tracker="cve" />
<issue id="2017-5441" tracker="cve" />
<issue id="2017-5440" tracker="cve" />
<issue id="2017-5443" tracker="cve" />
<issue id="2017-5442" tracker="cve" />
<issue id="2017-5445" tracker="cve" />
<issue id="2017-5444" tracker="cve" />
<issue id="2017-5447" tracker="cve" />
<issue id="2017-5446" tracker="cve" />
<issue id="2017-5449" tracker="cve" />
<issue id="2017-5448" tracker="cve" />
<issue id="2017-5469" tracker="cve" />
<issue id="2017-7749" tracker="cve" />
<issue id="2017-7764" tracker="cve" />
<issue id="2017-7765" tracker="cve" />
<issue id="2017-5461" tracker="cve" />
<issue id="2017-7761" tracker="cve" />
<issue id="2017-5460" tracker="cve" />
<issue id="2017-7768" tracker="cve" />
<issue id="2017-5434" tracker="cve" />
<issue id="2017-5435" tracker="cve" />
<issue id="2017-5436" tracker="cve" />
<issue id="2017-7750" tracker="cve" />
<issue id="2017-5430" tracker="cve" />
<issue id="2017-5462" tracker="cve" />
<issue id="2017-5432" tracker="cve" />
<issue id="2017-5433" tracker="cve" />
<issue id="2017-5470" tracker="cve" />
<issue id="2017-5472" tracker="cve" />
<issue id="2017-7754" tracker="cve" />
<issue id="2017-5438" tracker="cve" />
<issue id="2017-5439" tracker="cve" />
<issue id="2017-5451" tracker="cve" />
<issue id="2017-5456" tracker="cve" />
<issue id="2017-5454" tracker="cve" />
<issue id="2017-5455" tracker="cve" />
<issue id="2017-7752" tracker="cve" />
<issue id="2017-7751" tracker="cve" />
<issue id="2017-5459" tracker="cve" />
<issue id="2017-7757" tracker="cve" />
<issue id="2017-7756" tracker="cve" />
<issue id="2017-7755" tracker="cve" />
<issue id="2016-10196" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>pcerny</packager>
<description>The MozillaFirefox was updated to the new ESR 52.2 release, which fixes the following issues (bsc#1043960):

* MFSA 2017-16/CVE-2017-7758
  Out-of-bounds read in Opus encoder
* MFSA 2017-16/CVE-2017-7749
  Use-after-free during docshell reloading
* MFSA 2017-16/CVE-2017-7751
  Use-after-free with content viewer listeners
* MFSA 2017-16/CVE-2017-5472
  Use-after-free using destroyed node when regenerating trees
* MFSA 2017-16/CVE-2017-5470
  Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
* MFSA 2017-16/CVE-2017-7752
  Use-after-free with IME input
* MFSA 2017-16/CVE-2017-7750
  Use-after-free with track elements
* MFSA 2017-16/CVE-2017-7768
  32 byte arbitrary file read through Mozilla Maintenance
  Service
* MFSA 2017-16/CVE-2017-7778
  Vulnerabilities in the Graphite 2 library
* MFSA 2017-16/CVE-2017-7754
  Out-of-bounds read in WebGL with ImageInfo object
* MFSA 2017-16/CVE-2017-7755
  Privilege escalation through Firefox Installer with same
  directory DLL files
* MFSA 2017-16/CVE-2017-7756
  Use-after-free and use-after-scope logging XHR header errors
* MFSA 2017-16/CVE-2017-7757
  Use-after-free in IndexedDB
* MFSA 2017-16/CVE-2017-7761
  File deletion and privilege escalation through Mozilla
  Maintenance Service helper.exe application
* MFSA 2017-16/CVE-2017-7763
  Mac fonts render some unicode characters as spaces
* MFSA 2017-16/CVE-2017-7765
  Mark of the Web bypass when saving executable files
* MFSA 2017-16/CVE-2017-7764
  (bmo#1364283, bmo#http://www.unicode.org/reports/tr31/tr31-26
   .html#Aspirational_Use_Scripts)
  Domain spoofing with combination of Canadian Syllabics and
  other unicode blocks

- update to Firefox ESR 52.1 (bsc#1035082)
* MFSA 2017-12/CVE-2016-10196
  Vulnerabilities in Libevent library
* MFSA 2017-12/CVE-2017-5443
  Out-of-bounds write during BinHex decoding
* MFSA 2017-12/CVE-2017-5429
  Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
  Firefox ESR 52.1
* MFSA 2017-12/CVE-2017-5464
  Memory corruption with accessibility and DOM manipulation
* MFSA 2017-12/CVE-2017-5465
  Out-of-bounds read in ConvolvePixel
* MFSA 2017-12/CVE-2017-5466
  Origin confusion when reloading isolated data:text/html URL
* MFSA 2017-12/CVE-2017-5467
  Memory corruption when drawing Skia content
* MFSA 2017-12/CVE-2017-5460
  Use-after-free in frame selection
* MFSA 2017-12/CVE-2017-5461
  Out-of-bounds write in Base64 encoding in NSS
* MFSA 2017-12/CVE-2017-5448
  Out-of-bounds write in ClearKeyDecryptor
* MFSA 2017-12/CVE-2017-5449
  Crash during bidirectional unicode manipulation with
  animation
* MFSA 2017-12/CVE-2017-5446
  Out-of-bounds read when HTTP/2 DATA frames are sent with
  incorrect data
* MFSA 2017-12/CVE-2017-5447
  Out-of-bounds read during glyph processing
* MFSA 2017-12/CVE-2017-5444
  Buffer overflow while parsing application/http-index-format
  content
* MFSA 2017-12/CVE-2017-5445
  Uninitialized values used while parsing application/http-
  index-format content
* MFSA 2017-12/CVE-2017-5442
  Use-after-free during style changes
* MFSA 2017-12/CVE-2017-5469
  Potential Buffer overflow in flex-generated code
* MFSA 2017-12/CVE-2017-5440
  Use-after-free in txExecutionState destructor during XSLT
  processing
* MFSA 2017-12/CVE-2017-5441
  Use-after-free with selection during scroll events
* MFSA 2017-12/CVE-2017-5439
  Use-after-free in nsTArray Length() during XSLT processing
* MFSA 2017-12/CVE-2017-5438
  Use-after-free in nsAutoPtr during XSLT processing
* MFSA 2017-12/CVE-2017-5436
  Out-of-bounds write with malicious font in Graphite 2
* MFSA 2017-12/CVE-2017-5435
  Use-after-free during transaction processing in the editor
* MFSA 2017-12/CVE-2017-5434
  Use-after-free during focus handling
* MFSA 2017-12/CVE-2017-5433
  Use-after-free in SMIL animation functions
* MFSA 2017-12/CVE-2017-5432
  Use-after-free in text input selection
* MFSA 2017-12/CVE-2017-5430
  Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
* MFSA 2017-12/CVE-2017-5459
  Buffer overflow in WebGL
* MFSA 2017-12/CVE-2017-5462
  DRBG flaw in NSS
* MFSA 2017-12/CVE-2017-5455
  Sandbox escape through internal feed reader APIs
* MFSA 2017-12/CVE-2017-5454
  Sandbox escape allowing file system read access through file
  picker
* MFSA 2017-12/CVE-2017-5456
  Sandbox escape allowing local file system access
* MFSA 2017-12/CVE-2017-5451
  Addressbar spoofing with onblur event

</description>
<summary>Security update for MozillaFirefox, MozillaFirefox-branding-SLE</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.4974

Places