Synopsis:          Critical: firefox security update

Advisory ID:       SLSA-2017:0459-1

Issue Date:        2017-03-08

CVE Numbers:       CVE-2017-5400

                   CVE-2017-5401

                   CVE-2017-5402

                   CVE-2017-5404

                   CVE-2017-5407

                   CVE-2017-5410

                   CVE-2017-5408

                   CVE-2017-5405

                   CVE-2017-5398

--



This update upgrades Firefox to version 45.8.0 ESR.



Security Fix(es):



* Multiple flaws were found in the processing of malformed web content. A

web page containing malicious content could cause Firefox to crash or,

potentially, execute arbitrary code with the privileges of the user

running Firefox. (CVE-2017-5398, CVE-2017-5400, CVE-2017-5401,

CVE-2017-5402, CVE-2017-5404, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410,

CVE-2017-5405)

--



SL5

  x86_64

    firefox-45.8.0-2.el5_11.i386.rpm

    firefox-45.8.0-2.el5_11.x86_64.rpm

    firefox-debuginfo-45.8.0-2.el5_11.i386.rpm

    firefox-debuginfo-45.8.0-2.el5_11.x86_64.rpm

  i386

    firefox-45.8.0-2.el5_11.i386.rpm

    firefox-debuginfo-45.8.0-2.el5_11.i386.rpm

SL6

  x86_64

    firefox-45.8.0-2.el6_8.x86_64.rpm

    firefox-debuginfo-45.8.0-2.el6_8.x86_64.rpm

    firefox-45.8.0-2.el6_8.i686.rpm

    firefox-debuginfo-45.8.0-2.el6_8.i686.rpm

  i386

    firefox-45.8.0-2.el6_8.i686.rpm

    firefox-debuginfo-45.8.0-2.el6_8.i686.rpm



- Scientific Linux Development Team