<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" class="" id="yui_3_16_0_1_1445516421545_7211">URL: <a href="http://ftp.mozilla.org/pub/firefox/releases/38.2.1esr/contrib/" id="yui_3_16_0_1_1445516421545_7214">http://ftp.mozilla.org/pub/firefox/releases/38.2.1esr/contrib/</a></span></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><br></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6668" class="">Mozilla Firefox is an open source web browser. XULRunner provides the XUL</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6670" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6672" class="">Runtime environment for Mozilla Firefox.</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6674" class=""><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6676" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6678" class="">A flaw was found in the processing of malformed web content. A web page</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6680" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6682" class="">containing malicious content could cause Firefox to crash or, potentially,</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6684" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6686" class="">execute arbitrary code with the privileges of the user running Firefox.</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6688" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6690" class="">(CVE-2015-4497)</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6692" class=""><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6694" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6696" class="">A flaw was found in the way Firefox handled installation of add-ons.</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6698" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6700" class="">An attacker could use this flaw to bypass the add-on installation prompt,</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6702" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6704" class="">and trick the user into installing an add-on from a malicious source.</span><br style="box-sizing: border-box; color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6706" class=""><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" id="yui_3_16_0_1_1445516421545_6708" class="">(CVE-2015-4498)</span><br></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" class=""><br></span></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" class="" id="yui_3_16_0_1_1445516421545_6741">All Firefox users should upgrade to Firefox version 38.2.1 ESR or greater, which</span></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" class="" id="yui_3_16_0_1_1445516421545_6755">corrects these issues. After installing the update, Firefox must be restarted</span></div><div dir="ltr" id="yui_3_16_0_1_1445516421545_6714"><span style="color: rgb(51, 51, 51); font-family: Overpass, 'Open Sans', Helvetica, sans-serif; font-size: 14px; line-height: 21px;" class="" id="yui_3_16_0_1_1445516421545_6762">for the changes to take effect.<br></span></div></div></body></html>