< back to search

gpp_maybe Security update for mozillafirefox, mozilla-nss
SUSE-SLE-SERVER-12-2015-472

Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities. - Firefox was updated to 38.2.1 ESR (bsc#943608) * MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during restyling * MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on notification bypass through data URLs - Firefox was updated to 38.2.0 ESR (bsc#940806) * MFSA 2015-78/CVE-2015-4495 (bmo#1178058, bmo#1179262) Same origin violation and local file stealing via PDF reader * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 (bmo#1143130, bmo#1161719, bmo#1177501, bmo#1181204, bmo#1184068, bmo#1188590, bmo#1146213, bmo#1178890, bmo#1182711) Miscellaneous memory safety hazards (rv:40.0 / rv:38.2) * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties * MFSA 2015-83/CVE-2015-4479 (bmo#1185115, bmo#1144107, bmo#1170344, bmo#1186718) Overflow issues in libstagefright * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 (bmo#1176270, bmo#1182723, bmo#1171603) Vulnerabilities found through code inspection * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers Mozilla NSS switched the CKBI ABI from 1.98 to 2.4, which is what Firefox 38ESR uses.

cloud_download Downloads

SUSE Linux Enterprise Server 12 s390x
SUSE Linux Enterprise Server 12 ppc64le
  • Packages
    MozillaFirefox
    Mozilla Firefox Web Browser
    38.2.1esr-45.1 lock rpm lock src
    MozillaFirefox-branding-SLE
    SLED branding of MozillaFirefox
    31.0-14.1 lock rpm lock src
    MozillaFirefox-translations
    Translations for Firefox
    38.2.1esr-45.1 lock rpm
    libfreebl3
    Freebl library for the Network Security Services
    3.19.2.0-26.2 lock rpm
    libfreebl3-hmac
    Freebl library for the Network Security Services
    3.19.2.0-26.2 lock rpm
    libsoftokn3
    Network Security Services Softoken Module
    3.19.2.0-26.2 lock rpm
    libsoftokn3-hmac
    Network Security Services Softoken Module
    3.19.2.0-26.2 lock rpm
    mozilla-nss
    Network Security Services
    3.19.2.0-26.2 lock rpm lock src
    mozilla-nss-certs
    CA certificates for NSS
    3.19.2.0-26.2 lock rpm
    mozilla-nss-tools
    Tools for developing, debugging, and managing applications that use NSS
    3.19.2.0-26.2 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12 x86_64