SUSE-SU-2019:1861-2
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1861-2.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2019:1861-2
- Related
- Published
- 2019-07-29T09:07:04Z
- Modified
- 2019-07-29T09:07:04Z
- Summary
- Security update for MozillaFirefox
- Details
-
This update for MozillaFirefox, mozilla-nss fixes the following issues:
MozillaFirefox to version ESR 60.8:
- CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).
- CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).
- CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).
- CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).
- CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).
- CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).
- CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).
- CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).
- CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).
- CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).
mozilla-nss to version 3.44.1:
- Added IPSEC IKE support to softoken
- Many new FIPS test cases
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-20191861-2/
- https://bugzilla.suse.com/1140868
- https://www.suse.com/security/cve/CVE-2019-11709
- https://www.suse.com/security/cve/CVE-2019-11711
- https://www.suse.com/security/cve/CVE-2019-11712
- https://www.suse.com/security/cve/CVE-2019-11713
- https://www.suse.com/security/cve/CVE-2019-11715
- https://www.suse.com/security/cve/CVE-2019-11717
- https://www.suse.com/security/cve/CVE-2019-11719
- https://www.suse.com/security/cve/CVE-2019-11729
- https://www.suse.com/security/cve/CVE-2019-11730
- https://www.suse.com/security/cve/CVE-2019-9811
Affected packages
SUSE:HPE Helion OpenStack 8 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=HPE%20Helion%20OpenStack%208
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed60.8.0-109.83.3
Ecosystem specific
{
"binaries": [
{
"libsoftokn3-hmac": "3.44.1-58.28.1",
"MozillaFirefox": "60.8.0-109.83.3",
"mozilla-nss-32bit": "3.44.1-58.28.1",
"mozilla-nss-certs": "3.44.1-58.28.1",
"MozillaFirefox-translations-common": "60.8.0-109.83.3",
"libsoftokn3-hmac-32bit": "3.44.1-58.28.1",
"mozilla-nss-sysinit": "3.44.1-58.28.1",
"libfreebl3-32bit": "3.44.1-58.28.1",
"libfreebl3-hmac": "3.44.1-58.28.1",
"libfreebl3-hmac-32bit": "3.44.1-58.28.1",
"libfreebl3": "3.44.1-58.28.1",
"mozilla-nss-certs-32bit": "3.44.1-58.28.1",
"mozilla-nss-tools": "3.44.1-58.28.1",
"mozilla-nss-sysinit-32bit": "3.44.1-58.28.1",
"libsoftokn3": "3.44.1-58.28.1",
"libsoftokn3-32bit": "3.44.1-58.28.1",
"mozilla-nss": "3.44.1-58.28.1"
}
]
}
SUSE:HPE Helion OpenStack 8 / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- purl:rpm/suse/mozilla-nss&distro=HPE%20Helion%20OpenStack%208
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.44.1-58.28.1
Ecosystem specific
{
"binaries": [
{
"libsoftokn3-hmac": "3.44.1-58.28.1",
"MozillaFirefox": "60.8.0-109.83.3",
"mozilla-nss-32bit": "3.44.1-58.28.1",
"mozilla-nss-certs": "3.44.1-58.28.1",
"MozillaFirefox-translations-common": "60.8.0-109.83.3",
"libsoftokn3-hmac-32bit": "3.44.1-58.28.1",
"mozilla-nss-sysinit": "3.44.1-58.28.1",
"libfreebl3-32bit": "3.44.1-58.28.1",
"libfreebl3-hmac": "3.44.1-58.28.1",
"libfreebl3-hmac-32bit": "3.44.1-58.28.1",
"libfreebl3": "3.44.1-58.28.1",
"mozilla-nss-certs-32bit": "3.44.1-58.28.1",
"mozilla-nss-tools": "3.44.1-58.28.1",
"mozilla-nss-sysinit-32bit": "3.44.1-58.28.1",
"libsoftokn3": "3.44.1-58.28.1",
"libsoftokn3-32bit": "3.44.1-58.28.1",
"mozilla-nss": "3.44.1-58.28.1"
}
]
}
SUSE:OpenStack Cloud Crowbar 8 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed60.8.0-109.83.3
Ecosystem specific
{
"binaries": [
{
"libsoftokn3-hmac": "3.44.1-58.28.1",
"MozillaFirefox": "60.8.0-109.83.3",
"mozilla-nss-32bit": "3.44.1-58.28.1",
"mozilla-nss-certs": "3.44.1-58.28.1",
"MozillaFirefox-translations-common": "60.8.0-109.83.3",
"libsoftokn3-hmac-32bit": "3.44.1-58.28.1",
"mozilla-nss-sysinit": "3.44.1-58.28.1",
"libfreebl3-32bit": "3.44.1-58.28.1",
"libfreebl3-hmac": "3.44.1-58.28.1",
"libfreebl3-hmac-32bit": "3.44.1-58.28.1",
"libfreebl3": "3.44.1-58.28.1",
"mozilla-nss-certs-32bit": "3.44.1-58.28.1",
"mozilla-nss-tools": "3.44.1-58.28.1",
"mozilla-nss-sysinit-32bit": "3.44.1-58.28.1",
"libsoftokn3": "3.44.1-58.28.1",
"libsoftokn3-32bit": "3.44.1-58.28.1",
"mozilla-nss": "3.44.1-58.28.1"
}
]
}
SUSE:OpenStack Cloud Crowbar 8 / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- purl:rpm/suse/mozilla-nss&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.44.1-58.28.1
Ecosystem specific
{
"binaries": [
{
"libsoftokn3-hmac": "3.44.1-58.28.1",
"MozillaFirefox": "60.8.0-109.83.3",
"mozilla-nss-32bit": "3.44.1-58.28.1",
"mozilla-nss-certs": "3.44.1-58.28.1",
"MozillaFirefox-translations-common": "60.8.0-109.83.3",
"libsoftokn3-hmac-32bit": "3.44.1-58.28.1",
"mozilla-nss-sysinit": "3.44.1-58.28.1",
"libfreebl3-32bit": "3.44.1-58.28.1",
"libfreebl3-hmac": "3.44.1-58.28.1",
"libfreebl3-hmac-32bit": "3.44.1-58.28.1",
"libfreebl3": "3.44.1-58.28.1",
"mozilla-nss-certs-32bit": "3.44.1-58.28.1",
"mozilla-nss-tools": "3.44.1-58.28.1",
"mozilla-nss-sysinit-32bit": "3.44.1-58.28.1",
"libsoftokn3": "3.44.1-58.28.1",
"libsoftokn3-32bit": "3.44.1-58.28.1",
"mozilla-nss": "3.44.1-58.28.1"
}
]
}