{"id":"SUSE-SU-2015:0978-1","summary":"Security update for MozillaFirefox","details":"\nThis update to Firefox 31.7.0 ESR fixes the following issues:\n\n    * \n\n      MFSA 2015-46 (CVE-2015-2708, CVE-2015-2709): Miscellaneous memory\n      safety hazards (rv:38.0 / rv:31.7). Upstream references: bmo#1120655,\n      bmo#1143299, bmo#1151139, bmo#1152177, bmo#1111251, bmo#1117977,\n      bmo#1128064, bmo#1135066, bmo#1143194, bmo#1146101, bmo#1149526,\n      bmo#1153688, bmo#1155474.\n\n    * \n\n      MFSA 2015-47 (CVE-2015-0797): Buffer overflow parsing H.264 video\n      with Linux Gstreamer. Upstream references: bmo#1080995.\n\n    * \n\n      MFSA 2015-48 (CVE-2015-2710): Buffer overflow with SVG content and\n      CSS. Upstream references: bmo#1149542.\n\n    * \n\n      MFSA 2015-51 (CVE-2015-2713): Use-after-free during text processing\n      with vertical text enabled. Upstream references: bmo#1153478.\n\n    * \n\n      MFSA 2015-54 (CVE-2015-2716): Buffer overflow when parsing compressed\n      XML. Upstream references: bmo#1140537.\n\nSecurity Issues:\n\n    * CVE-2015-0797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0797\u003e\n    * CVE-2015-2708\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708\u003e\n    * CVE-2015-2709\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709\u003e\n    * CVE-2015-2710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710\u003e\n    * CVE-2015-2713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713\u003e\n    * CVE-2015-2716\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716\u003e\n\n","modified":"2026-02-04T04:01:40.610312Z","published":"2015-05-19T09:15:45Z","related":["CVE-2015-0797","CVE-2015-2708","CVE-2015-2709","CVE-2015-2710","CVE-2015-2713","CVE-2015-2716"],"upstream":["CVE-2015-0797","CVE-2015-2708","CVE-2015-2709","CVE-2015-2710","CVE-2015-2713","CVE-2015-2716"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/930622"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0797"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2708"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2709"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2710"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2713"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2716"}],"schema_version":"1.7.3"}