SUSE-SU-2015:1268-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2015/suse-su-20151268-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1268-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2015:1268-1

Related

CVE-2015-2721
CVE-2015-2722
CVE-2015-2724
CVE-2015-2725
CVE-2015-2726
CVE-2015-2728
CVE-2015-2730
CVE-2015-2733
CVE-2015-2734
CVE-2015-2735
CVE-2015-2736
CVE-2015-2737
CVE-2015-2738
CVE-2015-2739
CVE-2015-2740
CVE-2015-2743
CVE-2015-4000

Published

2015-07-15T18:13:44Z

Modified

2015-07-15T18:13:44Z

Summary

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

Details

MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues.

For more details please check the changelogs.

These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).

This non-security issue was fixed: - bsc#908275: Firefox did not print in landscape orientation.

References

Affected packages

SUSE:Linux Enterprise Server 11 SP4 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-0.10.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: purl:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-0.5.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / mozilla-nss

Package

Name: mozilla-nss
Purl: purl:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-0.10.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-0.10.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: purl:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-0.5.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / mozilla-nss

Package

Name: mozilla-nss
Purl: purl:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-0.10.1

Ecosystem specific

{
    "binaries": [
        {
            "MozillaFirefox": "31.8.0esr-0.10.1",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-0.10.1",
            "libfreebl3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr": "4.10.8-0.5.1",
            "MozillaFirefox-translations": "31.8.0esr-0.10.1",
            "mozilla-nss-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-x86": "4.10.8-0.5.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nspr-32bit": "4.10.8-0.5.1",
            "libfreebl3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-x86": "3.19.2_CKBI_1.98-0.10.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-0.10.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-0.10.1"
        }
    ]
}