SUSE-SU-2015:1268-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1268-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2015:1268-1
- Related
- Published
- 2015-07-15T18:13:44Z
- Modified
- 2015-07-15T18:13:44Z
- Summary
- Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
- Details
-
MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues.
For more details please check the changelogs.
These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).
This non-security issue was fixed: - bsc#908275: Firefox did not print in landscape orientation.
- References
-
- https://www.suse.com/support/update/announcement/2015/suse-su-20151268-1/
- https://bugzilla.suse.com/908275
- https://bugzilla.suse.com/935033
- https://bugzilla.suse.com/935979
- https://www.suse.com/security/cve/CVE-2015-2721
- https://www.suse.com/security/cve/CVE-2015-2722
- https://www.suse.com/security/cve/CVE-2015-2724
- https://www.suse.com/security/cve/CVE-2015-2725
- https://www.suse.com/security/cve/CVE-2015-2726
- https://www.suse.com/security/cve/CVE-2015-2728
- https://www.suse.com/security/cve/CVE-2015-2730
- https://www.suse.com/security/cve/CVE-2015-2733
- https://www.suse.com/security/cve/CVE-2015-2734
- https://www.suse.com/security/cve/CVE-2015-2735
- https://www.suse.com/security/cve/CVE-2015-2736
- https://www.suse.com/security/cve/CVE-2015-2737
- https://www.suse.com/security/cve/CVE-2015-2738
- https://www.suse.com/security/cve/CVE-2015-2739
- https://www.suse.com/security/cve/CVE-2015-2740
- https://www.suse.com/security/cve/CVE-2015-2743
- https://www.suse.com/security/cve/CVE-2015-4000
Affected packages
SUSE:Linux Enterprise Server 11 SP4 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed31.8.0esr-0.10.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}
SUSE:Linux Enterprise Server 11 SP4 / mozilla-nspr
Package
- Name
- mozilla-nspr
- Purl
- purl:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.10.8-0.5.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}
SUSE:Linux Enterprise Server 11 SP4 / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- purl:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.19.2_CKBI_1.98-0.10.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed31.8.0esr-0.10.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / mozilla-nspr
Package
- Name
- mozilla-nspr
- Purl
- purl:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.10.8-0.5.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- purl:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.19.2_CKBI_1.98-0.10.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "31.8.0esr-0.10.1",
"mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
"libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr": "4.10.8-0.5.1",
"MozillaFirefox-translations": "31.8.0esr-0.10.1",
"mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-x86": "4.10.8-0.5.1",
"mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nspr-32bit": "4.10.8-0.5.1",
"libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
"mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
"libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
}
]
}