[ GLSA 201512-10 ] Mozilla Products

[GLSA]

Gentoo Linux Security Advisory

Title: Mozilla Products: Multiple vulnerabilities (GLSA 201512-10)
Severity: normal
Exploitable: remote
Date: December 30, 2015
Updated: December 31, 2015
Bug(s): #545232, #554036, #556942, #564818, #567298, #568376
ID: 201512-10

Synopsis

Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.


Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an
open-source email client, both from the Mozilla Project.


Affected Packages

Package: www-client/firefox
Vulnerable: < 38.5.0
Unaffected: >= 38.5.0
Architectures: All supported architectures

Package: www-client/firefox-bin
Vulnerable: < 38.5.0
Unaffected: >= 38.5.0
Architectures: All supported architectures

Package: mail-client/thunderbird
Vulnerable: < 38.5.0
Unaffected: >= 38.5.0
Architectures: All supported architectures

Package: mail-client/thunderbird-bin
Vulnerable: < 38.5.0
Unaffected: >= 38.5.0
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Mozilla Firefox and
Mozilla Thunderbird. Please review the CVE identifiers referenced below
for details.


Impact

A remote attacker could entice a user to view a specially crafted web
page or email, possibly resulting in execution of arbitrary code or a
Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Firefox users should upgrade to the latest version: