Update to latest upstream.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is a MozillaFirefox update to version 29.0 :

  - MFSA 2014-34/CVE-2014-1518/CVE-2014-1519 Miscellaneous     memory safety hazards

  - MFSA 2014-36/CVE-2014-1522 (bmo#995289) Web Audio memory     corruption issues

  - MFSA 2014-37/CVE-2014-1523 (bmo#969226) Out of bounds     read while decoding JPG images

  - MFSA 2014-38/CVE-2014-1524 (bmo#989183) Buffer overflow     when using non-XBL object as XBL

  - MFSA 2014-39/CVE-2014-1525 (bmo#989210) Use-after-free     in the Text Track Manager for HTML video

  - MFSA 2014-41/CVE-2014-1528 (bmo#963962) Out-of-bounds     write in Cairo

  - MFSA 2014-42/CVE-2014-1529 (bmo#987003) Privilege     escalation through Web Notification API

  - MFSA 2014-43/CVE-2014-1530 (bmo#895557) Cross-site     scripting (XSS) using history navigations

  - MFSA 2014-44/CVE-2014-1531 (bmo#987140) Use-after-free     in imgLoader while resizing images

  - MFSA 2014-45/CVE-2014-1492 (bmo#903885) Incorrect IDNA     domain name matching for wildcard certificates (fixed by     NSS 3.16)

  - MFSA 2014-46/CVE-2014-1532 (bmo#966006) Use-after-free     in nsHostResolver

  - MFSA 2014-47/CVE-2014-1526 (bmo#988106) Debugger can     bypass XrayWrappers with JavaScript

  - rebased patches

  - removed obsolete patches

  - firefox-browser-css.patch

  - mozilla-aarch64-599882cfb998.diff

  - mozilla-aarch64-bmo-963028.patch

  - mozilla-aarch64-bmo-963029.patch

  - mozilla-aarch64-bmo-963030.patch

  - mozilla-aarch64-bmo-963031.patch

  - requires NSS 3.16

  - added mozilla-icu-strncat.patch to fix post build checks

  - add mozilla-aarch64-599882cfb998.patch,     mozilla-aarch64-bmo-810631.patch,     mozilla-aarch64-bmo-962488.patch,     mozilla-aarch64-bmo-963030.patch,     mozilla-aarch64-bmo-963027.patch,     mozilla-aarch64-bmo-963028.patch,     mozilla-aarch64-bmo-963029.patch,     mozilla-aarch64-bmo-963023.patch,     mozilla-aarch64-bmo-963024.patch,     mozilla-aarch64-bmo-963031.patch: AArch64 porting

  - Add patch for bmo#973977

  - mozilla-ppc64-xpcom.patch

  - Refresh mozilla-ppc64le-xpcom.patch patch

  - Adapt mozilla-ppc64le-xpcom.patch to Mozilla > 24.0     build system

This is also a mozilla-nss update to version 3.16 :

  - required for Firefox 29

  - bmo#903885 - (CVE-2014-1492) In a wildcard certificate,     the wildcard character should not be embedded within the     U-label of an internationalized domain name. See the     last bullet point in RFC 6125, Section 7.2.

  - Supports the Linux x32 ABI. To build for the Linux x32     target, set the environment variable USE_X32=1 when     building NSS. New Functions :

  - NSS_CMSSignerInfo_Verify New Macros

  - TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA,     etc., cipher suites that were first defined in SSL 3.0     can now be referred to with their official IANA names in     TLS, with the TLS_ prefix. Previously, they had to be     referred to with their names in SSL 3.0, with the SSL_     prefix. Notable Changes :

  - ECC is enabled by default. It is no longer necessary to     set the environment variable NSS_ENABLE_ECC=1 when     building NSS. To disable ECC, set the environment     variable NSS_DISABLE_ECC=1 when building NSS.

  - libpkix should not include the common name of CA as DNS     names when evaluating name constraints.

  - AESKeyWrap_Decrypt should not return SECSuccess for     invalid keys.

  - Fix a memory corruption in sec_pkcs12_new_asafe.

  - If the NSS_SDB_USE_CACHE environment variable is set,     skip the runtime test sdb_measureAccess.

  - The built-in roots module has been updated to version     1.97, which adds, removes, and distrusts several     certificates.

  - The atob utility has been improved to automatically     ignore lines of text that aren't in base64 format.

  - The certutil utility has been improved to support     creation of version 1 and version 2 certificates, in     addition to the existing version 3 support.

This is a SeaMonkey update to version 2.26 :

  - MFSA 2014-34/CVE-2014-1518/CVE-2014-1519 Miscellaneous     memory safety hazards

  - MFSA 2014-36/CVE-2014-1522 (bmo#995289) Web Audio memory     corruption issues

  - MFSA 2014-37/CVE-2014-1523 (bmo#969226) Out of bounds     read while decoding JPG images

  - MFSA 2014-38/CVE-2014-1524 (bmo#989183) Buffer overflow     when using non-XBL object as XBL

  - MFSA 2014-39/CVE-2014-1525 (bmo#989210) Use-after-free     in the Text Track Manager for HTML video

  - MFSA 2014-41/CVE-2014-1528 (bmo#963962) Out-of-bounds     write in Cairo

  - MFSA 2014-42/CVE-2014-1529 (bmo#987003) Privilege     escalation through Web Notification API

  - MFSA 2014-43/CVE-2014-1530 (bmo#895557) Cross-site     scripting (XSS) using history navigations

  - MFSA 2014-44/CVE-2014-1531 (bmo#987140) Use-after-free     in imgLoader while resizing images

  - MFSA 2014-45/CVE-2014-1492 (bmo#903885) Incorrect IDNA     domain name matching for wildcard certificates (fixed by     NSS 3.16)

  - MFSA 2014-46/CVE-2014-1532 (bmo#966006) Use-after-free     in nsHostResolver

  - MFSA 2014-47/CVE-2014-1526 (bmo#988106) Debugger can     bypass XrayWrappers with JavaScript

  - rebased patches

  - added aarch64 porting patches

  - mozilla-aarch64-bmo-810631.patch

  - mozilla-aarch64-bmo-962488.patch

  - mozilla-aarch64-bmo-963023.patch

  - mozilla-aarch64-bmo-963024.patch

  - mozilla-aarch64-bmo-963027.patch

  - requires NSPR 4.10.3 and NSS 3.16

  - added mozilla-icu-strncat.patch to fix post build checks

The remote host is affected by the vulnerability described in GLSA-201504-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firefox, Thunderbird,       and SeaMonkey. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information, spoof       the address bar, conduct clickjacking attacks, bypass security       restrictions and protection mechanisms,  or have other unspecified       impact.
  Workaround :

    There are no known workarounds at this time.

The installed version of Firefox is a version prior to 29.0 and is, therefore, potentially affected by the following vulnerabilities :

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

  - Memory issues exist that could lead to arbitrary code     execution. (CVE-2014-1518, CVE-2014-1519)

  - An issue exists related to the 'Mozilla Maintenance     Service' that could lead to privilege escalation due to     the creation of a writeable temporary directory during     the update process. (CVE-2014-1520)

  - An out-of-bounds read issue exists in the Web Audio     feature that could lead to information disclosure.
    (CVE-2014-1522)

  - An out-of-bounds read issue exists when decoding     certain JPG images that could lead to a denial of     service. (CVE-2014-1523)

  - A memory corruption issue exists due to improper     validation of XBL objects that could lead to arbitrary     code execution. (CVE-2014-1524)

  - A use-after-free memory issue exists in the Text Track     Manager during HTML video processing that could lead     to arbitrary code execution. (CVE-2014-1525)

  - An issue exists related to the debugger bypassing     XrayWrappers that could lead to privilege escalation.
    (CVE-2014-1526)

  - An out-of-bounds write issue exists in the Cairo     graphics library that could lead to arbitrary code     execution.	Note that this issue only affects Firefox     28 and SeaMonkey 2.25. (CVE-2014-1528)

  - A security bypass issue exists in the Web Notification     API that could lead to arbitrary code execution.
    (CVE-2014-1529)

  - A cross-site scripting issue exists that could allow an     attacker to load another website other than the URL for     the website that is shown in the address bar.
    (CVE-2014-1530)

  - A use-after-free issue exists due to an 'imgLoader'     object being freed when being resized.  This issue     could lead to arbitrary code execution. (CVE-2014-1531)

  - A use-after-free issue exists during host resolution     that could lead to arbitrary code execution.
    (CVE-2014-1532)

The installed version of Thunderbird is a version prior to 24.5 and is, therefore, potentially affected by the following vulnerabilities:

  - Memory issues exist that could lead to arbitrary code     execution. (CVE-2014-1518, CVE-2014-1519)

  - An out-of-bounds read issue exists when decoding     certain JPG images that could lead to a denial of     service. (CVE-2014-1523)

  - A memory corruption issue exists due to improper     validation of XBL objects that could lead to arbitrary     code execution. (CVE-2014-1524)

  - A security bypass issue exists in the Web Notification     API that could lead to arbitrary code execution.
    (CVE-2014-1529)

  - A cross-site scripting issue exists that could allow an     attacker to load another website other than the URL for     the website that is shown in the address bar.
    (CVE-2014-1530)

  - A use-after-free issue exists due to an 'imgLoader'     object being freed when being resized.  This issue     could lead to arbitrary code execution. (CVE-2014-1531)

  - A use-after-free issue exists during host resolution     that could lead to arbitrary code execution.
    (CVE-2014-1532)

The installed version of Firefox is a version prior to version 29.0.
It is, therefore, potentially affected by multiple vulnerabilities :

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

  - Memory issues exist that could lead to arbitrary code     execution. (CVE-2014-1518, CVE-2014-1519)

  - An out-of-bounds read issue exists in the Web Audio     feature that could lead to information disclosure.
    (CVE-2014-1522)

  - An out-of-bounds read issue exists when decoding     certain JPG images that could lead to a denial of     service. (CVE-2014-1523)

  - A memory corruption issue exists due to improper     validation of XBL objects that could lead to arbitrary     code execution. (CVE-2014-1524)

  - A use-after-free memory issue exists in the Text Track     Manager during HTML video processing that could lead     to arbitrary code execution. (CVE-2014-1525)

  - An issue exists related to the debugger bypassing     XrayWrappers that could lead to privilege escalation.
    (CVE-2014-1526)

  - A security bypass issue exists in the Web Notification     API that could lead to arbitrary code execution.
    (CVE-2014-1529)

  - A cross-site scripting issue exists that could allow an     attacker to load another website other than the URL for     the website that is shown in the address bar.
    (CVE-2014-1530)

  - A use-after-free issue exists due to an 'imgLoader'     object being freed when being resized.  This issue     could lead to arbitrary code execution. (CVE-2014-1531)

  - A use-after-free issue exists during host resolution     that could lead to arbitrary code execution.
    (CVE-2014-1532)

The Mozilla Project reports :

MFSA 2014-34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)

MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer

MFSA 2014-36 Web Audio memory corruption issues

MFSA 2014-37 Out of bounds read while decoding JPG images

MFSA 2014-38 Buffer overflow when using non-XBL object as XBL

MFSA 2014-39 Use-after-free in the Text Track Manager for HTML video

MFSA 2014-41 Out-of-bounds write in Cairo

MFSA 2014-42 Privilege escalation through Web Notification API

MFSA 2014-43 Cross-site scripting (XSS) using history navigations

MFSA 2014-44 Use-after-free in imgLoader while resizing images

MFSA 2014-45 Incorrect IDNA domain name matching for wildcard certificates

MFSA 2014-46 Use-after-free in nsHostResolve

MFSA 2014-47 Debugger can bypass XrayWrappers with JavaScript

The installed version of Firefox ESR 24.x is a version prior to 24.5.
It is, therefore, potentially affected by the following vulnerabilities :

  - Memory issues exist that could lead to arbitrary code     execution. (CVE-2014-1518, CVE-2014-1519)

  - An issue exists related to the 'Mozilla Maintenance     Service' that could lead to privilege escalation due to     the creation of a writeable temporary directory during     the update process. (CVE-2014-1520)

  - An out-of-bounds read issue exists when decoding     certain JPG images that could lead to a denial of     service. (CVE-2014-1523)

  - A memory corruption issue exists due to improper     validation of XBL objects that could lead to arbitrary     code execution. (CVE-2014-1524)

  - A security bypass issue exists in the Web Notification     API that could lead to arbitrary code execution.
    (CVE-2014-1529)

  - A cross-site scripting issue exists that could allow an     attacker to load another website other than the URL for     the website that is shown in the address bar.
    (CVE-2014-1530)

  - A use-after-free issue exists due to an 'imgLoader'     object being freed when being resized.  This issue     could lead to arbitrary code execution. (CVE-2014-1531)

  - A use-after-free issue exists during host resolution     that could lead to arbitrary code execution.
    (CVE-2014-1532)

ID	名稱	產品	系列	已發布	已更新	嚴重性
73819	Fedora 20 : firefox-29.0-5.fc20 / thunderbird-24.5.0-1.fc20 / xulrunner-29.0-1.fc20 (2014-5833)	Nessus	Fedora Local Security Checks	2014/5/2	2021/1/11	critical
75346	openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:0599-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
75352	openSUSE Security Update : seamonkey (openSUSE-SU-2014:0629-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
82632	GLSA-201504-01 : Mozilla Products: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2015/4/8	2021/1/11	critical
73769	Firefox < 29.0 Multiple Vulnerabilities	Nessus	Windows	2014/4/29	2026/6/23	critical
73770	Mozilla Thunderbird < 24.5 Multiple Vulnerabilities	Nessus	Windows	2014/4/29	2019/11/26	critical
73766	Firefox < 29.0 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2014/4/29	2026/3/3	critical
73779	FreeBSD : mozilla -- multiple vulnerabilities (985d4d6c-cfbd-11e3-a003-b4b52fce4ce8)	Nessus	FreeBSD Local Security Checks	2014/4/30	2021/1/6	critical
73768	Firefox ESR 24.x < 24.5 Multiple Vulnerabilities	Nessus	Windows	2014/4/29	2026/6/23	critical
73848	Fedora 19 : firefox-29.0-5.fc19 / thunderbird-24.5.0-1.fc19 / xulrunner-29.0-1.fc19 (2014-5829)	Nessus	Fedora Local Security Checks	2014/5/3	2021/1/11	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical