< back to search

gpp_maybe Security update for mozillafirefox, mozilla-nspr and mozilla-nss
SUSE-SLE-Module-Basesystem-15-2018-3044

This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues: Issues fixed in MozillaFirefox: - Update to Firefox ESR 60.4 (bsc#1119105) - CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 - CVE-2018-18492: Fixed a use-after-free with select element - CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia - CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs - CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images - CVE-2018-12405: Fixed a few memory safety bugs Issues fixed in mozilla-nss: - Update to NSS 3.40.1 (bsc#1119105) - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069) - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873) - CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410) - Fixed a decryption failure during FFDHE key exchange - Various security fixes in the ASN.1 code Issues fixed in mozilla-nspr: - Update mozilla-nspr to 4.20 (bsc#1119105)

cloud_download Downloads

Basesystem Module 15 aarch64
  • Packages
    libfreebl3
    Freebl library for the Network Security Services
    3.40.1-3.7.2 lock rpm
    libsoftokn3
    Network Security Services Softoken Module
    3.40.1-3.7.2 lock rpm
    mozilla-nspr
    Netscape Portable Runtime
    4.20-3.3.2 lock rpm lock src
    mozilla-nspr-devel
    Netscape Portable Runtime development files
    4.20-3.3.2 lock rpm
    mozilla-nss
    Network Security Services
    3.40.1-3.7.2 lock rpm lock src
    mozilla-nss-certs
    CA certificates for NSS
    3.40.1-3.7.2 lock rpm
    mozilla-nss-devel
    Network (Netscape) Security Services development files
    3.40.1-3.7.2 lock rpm
    mozilla-nss-sysinit
    System NSS Initialization
    3.40.1-3.7.2 lock rpm
    mozilla-nss-tools
    Tools for developing, debugging, and managing applications that use NSS
    3.40.1-3.7.2 lock rpm
Basesystem Module 15 ppc64le
  • Packages
    libfreebl3
    Freebl library for the Network Security Services
    3.40.1-3.7.2 lock rpm
    libsoftokn3
    Network Security Services Softoken Module
    3.40.1-3.7.2 lock rpm
    mozilla-nspr
    Netscape Portable Runtime
    4.20-3.3.2 lock rpm lock src
    mozilla-nspr-devel
    Netscape Portable Runtime development files
    4.20-3.3.2 lock rpm
    mozilla-nss
    Network Security Services
    3.40.1-3.7.2 lock rpm lock src
    mozilla-nss-certs
    CA certificates for NSS
    3.40.1-3.7.2 lock rpm
    mozilla-nss-devel
    Network (Netscape) Security Services development files
    3.40.1-3.7.2 lock rpm
    mozilla-nss-sysinit
    System NSS Initialization
    3.40.1-3.7.2 lock rpm
    mozilla-nss-tools
    Tools for developing, debugging, and managing applications that use NSS
    3.40.1-3.7.2 lock rpm
Basesystem Module 15 s390x
  • Packages
    libfreebl3
    Freebl library for the Network Security Services
    3.40.1-3.7.2 lock rpm
    libsoftokn3
    Network Security Services Softoken Module
    3.40.1-3.7.2 lock rpm
    mozilla-nspr
    Netscape Portable Runtime
    4.20-3.3.2 lock rpm lock src
    mozilla-nspr-devel
    Netscape Portable Runtime development files
    4.20-3.3.2 lock rpm
    mozilla-nss
    Network Security Services
    3.40.1-3.7.2 lock rpm lock src
    mozilla-nss-certs
    CA certificates for NSS
    3.40.1-3.7.2 lock rpm
    mozilla-nss-devel
    Network (Netscape) Security Services development files
    3.40.1-3.7.2 lock rpm
    mozilla-nss-sysinit
    System NSS Initialization
    3.40.1-3.7.2 lock rpm
    mozilla-nss-tools
    Tools for developing, debugging, and managing applications that use NSS
    3.40.1-3.7.2 lock rpm
Basesystem Module 15 x86_64