Mozilla Firefox Security Advisory (MFSA2015-143) - Linux

This host is missing a security update for Mozilla Firefox.

Linux file chooser crashes on malformed images due to flaws in Jasper library Security researcher Gustavo Grieco reported that on Linux Gnome systems the dialog for choosing local files uses the operating system's gdk-pixbuf library to render thumbnails for image file types. This library supports various image decoders, and Grieco reported that the Jasper and TGA decoders were unmaintained and have several known vulnerabilities. Firefox has disabled the use of those decoders in gdk-pixbuf.

Firefox version(s) below 43.

Checks if a vulnerable package version is present on the target host.

The vendor has released an update. Please see the reference(s) for more information.