RHSA-2016:0373Critical

Red Hat Security Advisory: firefox security update

Published
March 9, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (26)

CVE-2016-2794 →CVE-2016-2797 →CVE-2016-2798 →CVE-2016-1958 →CVE-2016-1960 →CVE-2016-1974 →CVE-2016-2796 →CVE-2016-2800 →CVE-2016-2802 →CVE-2016-1954 →CVE-2016-1962 →CVE-2016-1964 →CVE-2016-1965 →CVE-2016-2791 →CVE-2016-2792 →CVE-2016-2795 →CVE-2016-1952 →CVE-2016-1961 →CVE-2016-2790 →CVE-2016-2799 →CVE-2016-2801 →CVE-2016-1957 →CVE-2016-1966 →CVE-2016-1973 →CVE-2016-1977 →CVE-2016-2793 →

📋 Description

CVE-2016-1952 — Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16) CVE-2016-1954 — Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17) CVE-2016-1957 — Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20) CVE-2016-1958 — Mozilla: Displayed page address can be overridden (MFSA 2016-21) CVE-2016-1960 — Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23) CVE-2016-1961 — Mozilla: Use-after-free in SetBody (MFSA 2016-24) CVE-2016-1962 — Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25) CVE-2016-1964 — Mozilla: Use-after-free during XML transformations (MFSA 2016-27) CVE-2016-1965 — Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28) CVE-2016-1966 — Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31) CVE-2016-1973 — Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33) CVE-2016-1974 — Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34) CVE-2016-1977 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2790 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2791 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2792 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2793 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2794 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2795 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2796 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2797 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2798 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2799 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2800 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2801 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37) CVE-2016-2802 — graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

🎯 Affected products90

  • Red Hat Enterprise Linux (v. 5 server)
  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 5 client)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • firefox-0:38.7.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.7.0-1.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.7.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • firefox-0:38.7.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • firefox-0:38.7.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • +60 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (17)