SUSE-SU-2015:1269-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20151269-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2015:1269-1
Upstream
  • CVE-2015-2722
  • CVE-2015-2724
  • CVE-2015-2725
  • CVE-2015-2726
  • CVE-2015-2728
  • CVE-2015-2733
  • CVE-2015-2734
  • CVE-2015-2735
  • CVE-2015-2736
  • CVE-2015-2737
  • CVE-2015-2738
  • CVE-2015-2739
  • CVE-2015-2740
  • CVE-2015-2743
Related
  • CVE-2015-2721
  • CVE-2015-2722
  • CVE-2015-2724
  • CVE-2015-2725
  • CVE-2015-2726
  • CVE-2015-2728
  • CVE-2015-2730
  • CVE-2015-2733
  • CVE-2015-2734
  • CVE-2015-2735
  • CVE-2015-2736
  • CVE-2015-2737
  • CVE-2015-2738
  • CVE-2015-2739
  • CVE-2015-2740
  • CVE-2015-2743
  • CVE-2015-4000
Published
2015-07-14T10:29:53Z
Modified
2026-03-11T06:13:21Z
Summary
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
Details

MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues.

For more details please check the changelogs.

  • CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979).
  • CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979).
  • CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979).
  • CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979).
  • CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979).
  • CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979).
  • CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033).
  • CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).
References

Affected packages

SUSE:Linux Enterprise Desktop 12
MozillaFirefox

Package

Name
MozillaFirefox
Purl
pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
31.8.0esr-37.3

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nspr

Package

Name
mozilla-nspr
Purl
pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nss

Package

Name
mozilla-nss
Purl
pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.19.2_CKBI_1.98-21.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
SUSE:Linux Enterprise Server 12
MozillaFirefox

Package

Name
MozillaFirefox
Purl
pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
31.8.0esr-37.3

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nspr

Package

Name
mozilla-nspr
Purl
pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nss

Package

Name
mozilla-nss
Purl
pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.19.2_CKBI_1.98-21.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12
MozillaFirefox

Package

Name
MozillaFirefox
Purl
pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
31.8.0esr-37.3

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nspr

Package

Name
mozilla-nspr
Purl
pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nss

Package

Name
mozilla-nss
Purl
pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.19.2_CKBI_1.98-21.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox":  "31.8.0esr-37.3",
            "MozillaFirefox-translations":  "31.8.0esr-37.3",
            "libfreebl3":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac":  "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr":  "4.10.8-3.1",
            "mozilla-nspr-32bit":  "4.10.8-3.1",
            "mozilla-nss":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit":  "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
SUSE:Linux Enterprise Software Development Kit 12
MozillaFirefox

Package

Name
MozillaFirefox
Purl
pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
31.8.0esr-37.3

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox-devel":  "31.8.0esr-37.3",
            "mozilla-nspr-devel":  "4.10.8-3.1",
            "mozilla-nss-devel":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nspr

Package

Name
mozilla-nspr
Purl
pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox-devel":  "31.8.0esr-37.3",
            "mozilla-nspr-devel":  "4.10.8-3.1",
            "mozilla-nss-devel":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"
mozilla-nss

Package

Name
mozilla-nss
Purl
pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.19.2_CKBI_1.98-21.1

Ecosystem specific 

{
    "binaries":  [
        {
            "MozillaFirefox-devel":  "31.8.0esr-37.3",
            "mozilla-nspr-devel":  "4.10.8-3.1",
            "mozilla-nss-devel":  "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json"