< back to search

gpp_maybe Security update for mozillafirefox, mozilla-nspr, mozilla-nss
SUSE-SLE-SERVER-12-2015-807

This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 (bsc#952810) * MFSA 2015-133/CVE-2015-7183 (bmo#1205157) NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 (bsc#952810) * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868) NSS and NSPR memory corruption issues - MozillaFirefox was updated to 38.4.0 ESR (bsc#952810) * MFSA 2015-116/CVE-2015-4513 (bmo#1107011, bmo#1191942, bmo#1193038, bmo#1204580, bmo#1204669, bmo#1204700, bmo#1205707, bmo#1206564, bmo#1208665, bmo#1209471, bmo#1213979) Miscellaneous memory safety hazards (rv:42.0 / rv:38.4) * MFSA 2015-122/CVE-2015-7188 (bmo#1199430) Trailing whitespace in IP address hostnames can bypass same-origin policy * MFSA 2015-123/CVE-2015-7189 (bmo#1205900) Buffer overflow during image interactions in canvas * MFSA 2015-127/CVE-2015-7193 (bmo#1210302) CORS preflight is bypassed when non-standard Content-Type headers are received * MFSA 2015-128/CVE-2015-7194 (bmo#1211262) Memory corruption in libjar through zip files * MFSA 2015-130/CVE-2015-7196 (bmo#1140616) JavaScript garbage collection crash with Java applet * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 (bmo#1204061, bmo#1188010, bmo#1204155) Vulnerabilities found through code inspection * MFSA 2015-132/CVE-2015-7197 (bmo#1204269) Mixed content WebSocket policy bypass through workers * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 (bmo#1202868, bmo#1192028, bmo#1205157) NSS and NSPR memory corruption issues - fix printing on landscape media (bsc#908275)

cloud_download Downloads

SUSE Linux Enterprise Server 12 s390x
SUSE Linux Enterprise Server for SAP Applications 12 x86_64
SUSE Linux Enterprise Server 12 ppc64le
  • Packages
    MozillaFirefox
    Mozilla Firefox Web Browser
    38.4.0esr-51.1 lock rpm lock src
    MozillaFirefox-branding-SLE
    SLED branding of MozillaFirefox
    31.0-17.1 lock rpm lock src
    MozillaFirefox-translations
    Translations for Firefox
    38.4.0esr-51.1 lock rpm
    libfreebl3
    Freebl library for the Network Security Services
    3.19.2.1-29.1 lock rpm
    libfreebl3-hmac
    Freebl library for the Network Security Services
    3.19.2.1-29.1 lock rpm
    libsoftokn3
    Network Security Services Softoken Module
    3.19.2.1-29.1 lock rpm
    libsoftokn3-hmac
    Network Security Services Softoken Module
    3.19.2.1-29.1 lock rpm
    mozilla-nspr
    Netscape Portable Runtime
    4.10.10-9.1 lock rpm lock src
    mozilla-nss
    Network Security Services
    3.19.2.1-29.1 lock rpm lock src
    mozilla-nss-certs
    CA certificates for NSS
    3.19.2.1-29.1 lock rpm
    mozilla-nss-tools
    Tools for developing, debugging, and managing applications that use NSS
    3.19.2.1-29.1 lock rpm