SUSE-SU-2015:1269-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2015/suse-su-20151269-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1269-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2015:1269-1

Related

CVE-2015-2721
CVE-2015-2722
CVE-2015-2724
CVE-2015-2725
CVE-2015-2726
CVE-2015-2728
CVE-2015-2730
CVE-2015-2733
CVE-2015-2734
CVE-2015-2735
CVE-2015-2736
CVE-2015-2737
CVE-2015-2738
CVE-2015-2739
CVE-2015-2740
CVE-2015-2743
CVE-2015-4000

Published

2015-07-14T10:29:53Z

Modified

2015-07-14T10:29:53Z

Summary

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

Details

MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues.

For more details please check the changelogs. - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).

References

Affected packages

SUSE:Linux Enterprise Desktop 12 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-37.3

Ecosystem specific

{
    "binaries": [
        {
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 / mozilla-nss

Package

Name: mozilla-nss
Purl: pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-21.1

Ecosystem specific

{
    "binaries": [
        {
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-37.3

Ecosystem specific

{
    "binaries": [
        {
            "mozilla-nspr-devel": "4.10.8-3.1",
            "MozillaFirefox-devel": "31.8.0esr-37.3",
            "mozilla-nss-devel": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "mozilla-nspr-devel": "4.10.8-3.1",
            "MozillaFirefox-devel": "31.8.0esr-37.3",
            "mozilla-nss-devel": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 / mozilla-nss

Package

Name: mozilla-nss
Purl: pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-21.1

Ecosystem specific

{
    "binaries": [
        {
            "mozilla-nspr-devel": "4.10.8-3.1",
            "MozillaFirefox-devel": "31.8.0esr-37.3",
            "mozilla-nss-devel": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-37.3

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 / mozilla-nss

Package

Name: mozilla-nss
Purl: pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-21.1

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 / MozillaFirefox

Package

Name: MozillaFirefox
Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

31.8.0esr-37.3

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 / mozilla-nspr

Package

Name: mozilla-nspr
Purl: pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 / mozilla-nss

Package

Name: mozilla-nss
Purl: pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.19.2_CKBI_1.98-21.1

Ecosystem specific

{
    "binaries": [
        {
            "libsoftokn3-hmac": "3.19.2_CKBI_1.98-21.1",
            "MozillaFirefox": "31.8.0esr-37.3",
            "mozilla-nss-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-certs": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3-hmac-32bit": "3.19.2_CKBI_1.98-21.1",
            "libfreebl3": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr": "4.10.8-3.1",
            "MozillaFirefox-translations": "31.8.0esr-37.3",
            "mozilla-nss-certs-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nss-tools": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3": "3.19.2_CKBI_1.98-21.1",
            "libsoftokn3-32bit": "3.19.2_CKBI_1.98-21.1",
            "mozilla-nspr-32bit": "4.10.8-3.1",
            "mozilla-nss": "3.19.2_CKBI_1.98-21.1"
        }
    ]
}