| Errata ID | 46 | 
|---|---|
| Date | 2014-02-06 | 
| Source package | firefox-de | 
| Fixed in version | 24.3.0esr-6.38.201402051209 | 
| Description | This update consists of two updates for firefox-en and firefox-de. Several vulnerabilities have been fixed with the update to Firefox ESR 24.3: * Information disclosure in the handling of XBL scopes (CVE-2014-1479) * Stricter enforcing of Javascript access to window objects (CVE-2014-1481) * Memory safety error in handling raster images (CVE-2014-1482) * Use-after-free in image processing (CVE-2014-1486) * Cross-origin information leak in error messages of web workers (CVE-2014-1487) * Incorrect session ticket handling in NSS (CVE-2014-1490) * Stricter handling of Diffie Hellman keys in NSS (CVE-2014-1491)  | 
				
| Additional notes | This update fixes these vulnerabilities. | 
| CVE ID | CVE-2014-1479 CVE-2014-1481 CVE-2014-1482 CVE-2014-1486 CVE-2014-1487 CVE-2014-1490 CVE-2014-1491  | 
  
