Synopsis:          Critical: firefox security update

Advisory ID:       SLSA-2016:0197-1

Issue Date:        2016-02-16

CVE Numbers:       CVE-2016-1521

                   CVE-2016-1522

                   CVE-2016-1523

--



Multiple security flaws were found in the graphite2 font library shipped

with Firefox. A web page containing malicious content could cause Firefox

to crash or, potentially, execute arbitrary code with the privileges of

the user running Firefox. (CVE-2016-1521, CVE-2016-1522, CVE-2016-1523)



After installing the update, Firefox must be restarted for the changes to

take effect.

--



SL5

  x86_64

    firefox-38.6.1-1.el5_11.i386.rpm

    firefox-38.6.1-1.el5_11.x86_64.rpm

    firefox-debuginfo-38.6.1-1.el5_11.i386.rpm

    firefox-debuginfo-38.6.1-1.el5_11.x86_64.rpm

  i386

    firefox-38.6.1-1.el5_11.i386.rpm

    firefox-debuginfo-38.6.1-1.el5_11.i386.rpm

SL6

  x86_64

    firefox-38.6.1-1.el6_7.x86_64.rpm

    firefox-debuginfo-38.6.1-1.el6_7.x86_64.rpm

    firefox-38.6.1-1.el6_7.i686.rpm

    firefox-debuginfo-38.6.1-1.el6_7.i686.rpm

  i386

    firefox-38.6.1-1.el6_7.i686.rpm

    firefox-debuginfo-38.6.1-1.el6_7.i686.rpm

SL7

  x86_64

    firefox-38.6.1-1.el7_2.x86_64.rpm

    firefox-debuginfo-38.6.1-1.el7_2.x86_64.rpm

    firefox-38.6.1-1.el7_2.i686.rpm

    firefox-debuginfo-38.6.1-1.el7_2.i686.rpm



- Scientific Linux Development Team