gpp_maybe Security update for mozillafirefox

SUSE-SLE-SDK-12-2015-26

This update fixes the following security issues in MozillaFirefox: - MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 (bmo#1109889, bmo#1111737, bmo#1026774, bmo#1027300, bmo#1054538, bmo#1067473, bmo#1070962, bmo#1072130, bmo#1072871, bmo#1098583) Miscellaneous memory safety hazards (rv:35.0 / rv:31.4) - MFSA 2015-03/CVE-2014-8638 (bmo#1080987) sendBeacon requests lack an Origin header - MFSA 2015-04/CVE-2014-8639 (bmo#1095859) Cookie injection through Proxy Authenticate responses - MFSA 2015-06/CVE-2014-8641 (bmo#1108455) Read-after-free in WebRTC Also Mozilla NSS was updated to 3.17.3 to fix: * The QuickDER decoder now decodes lengths robustly (bmo#1064670/CVE-2014-1569) * Support for TLS_FALLBACK_SCSV has been added to the ssltap and tstclnt utilities * Changes in CA certificates

• Release Date
  Jan 16 2015
• References
  Bugzilla: 910669, 909563, 910647
  CVEs: CVE-2014-8641, CVE-2014-8639, CVE-2014-8638, CVE-2014-8635, CVE-2014-8634, CVE-2014-1569
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12 s390x

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  31.4.0esr-20.1 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  31.4.0esr-20.1 lock rpm

  mozilla-nss
  Network Security Services

  3.17.3-16.1 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.17.3-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  31.4.0esr-20.1 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  31.4.0esr-20.1 lock rpm

  mozilla-nss
  Network Security Services

  3.17.3-16.1 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.17.3-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  31.4.0esr-20.1 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  31.4.0esr-20.1 lock rpm

  mozilla-nss
  Network Security Services

  3.17.3-16.1 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.17.3-16.1 lock rpm