gpp_maybe
Security update for mozillafirefox, mozillafirefox-branding-sle and mozilla-nss
sdksp4-MozillaFirefox-12649
MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss were updated to fix nine security issues. MozillaFirefox was updated to version 45.2.0 ESR. mozilla-nss was updated to version 3.21.1. These security issues were fixed: - CVE-2016-2834: Memory safety bugs in NSS (MFSA 2016-61) (bsc#983639). - CVE-2016-2824: Out-of-bounds write with WebGL shader (MFSA 2016-53) (bsc#983651). - CVE-2016-2822: Addressbar spoofing though the SELECT element (MFSA 2016-52) (bsc#983652). - CVE-2016-2821: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51) (bsc#983653). - CVE-2016-2819: Buffer overflow parsing HTML5 fragments (MFSA 2016-50) (bsc#983655). - CVE-2016-2828: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56) (bsc#983646). - CVE-2016-2831: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58) (bsc#983643). - CVE-2016-2815, CVE-2016-2818: Miscellaneous memory safety hazards (MFSA 2016-49) (bsc#983638) These non-security issues were fixed: - Fix crashes on aarch64 * Determine page size at runtime (bsc#984006) * Allow aarch64 to work in safe mode (bsc#985659) - Fix crashes on mainframes All extensions must now be signed by addons.mozilla.org. Please read README.SUSE for more details.
-
Release DateJul 14 2016
-
ReferencesBugzilla: 984006, 985659, 983549, 983651, 983643, 983653, 983652, 983655, 983646, 983639, 983638
CVEs: CVE-2016-2834, CVE-2016-2824, CVE-2016-2822, CVE-2016-2815, CVE-2016-2821, CVE-2016-2819, CVE-2016-2818, CVE-2016-2828, CVE-2016-2831 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel45.2.0esr-45.2 lock src
Devel package for Firefoxfirefox-fontconfig45.2.0esr-45.2 lock rpm
Library for Font Configurationfirefox-fontconfig-devel2.11.0-2.1 lock src
Include Files and Libraries mandatory for Developmentmozilla-nspr2.11.0-2.1 lock rpm
Netscape Portable Runtimemozilla-nspr-devel4.12-29.1 lock src
Netscape Portable Runtime development filesmozilla-nss4.12-29.1 lock rpm
Network Security Servicesmozilla-nss-devel3.21.1-35.1 lock src
Network (Netscape) Security Services development files3.21.1-35.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel45.2.0esr-45.2 lock src
Devel package for Firefoxfirefox-fontconfig45.2.0esr-45.2 lock rpm
Library for Font Configurationfirefox-fontconfig-devel2.11.0-2.1 lock src
Include Files and Libraries mandatory for Developmentmozilla-nspr2.11.0-2.1 lock rpm
Netscape Portable Runtimemozilla-nspr-devel4.12-29.1 lock src
Netscape Portable Runtime development filesmozilla-nss4.12-29.1 lock rpm
Network Security Servicesmozilla-nss-devel3.21.1-35.1 lock src
Network (Netscape) Security Services development files3.21.1-35.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel45.2.0esr-45.2 lock src
Devel package for Firefoxfirefox-fontconfig45.2.0esr-45.2 lock rpm
Library for Font Configurationfirefox-fontconfig-devel2.11.0-2.1 lock src
Include Files and Libraries mandatory for Developmentmozilla-nspr2.11.0-2.1 lock rpm
Netscape Portable Runtimemozilla-nspr-devel4.12-29.1 lock src
Netscape Portable Runtime development filesmozilla-nss4.12-29.1 lock rpm
Network Security Servicesmozilla-nss-devel3.21.1-35.1 lock src
Network (Netscape) Security Services development files3.21.1-35.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel45.2.0esr-45.2 lock src
Devel package for Firefoxfirefox-fontconfig45.2.0esr-45.2 lock rpm
Library for Font Configurationfirefox-fontconfig-devel2.11.0-2.1 lock src
Include Files and Libraries mandatory for Developmentmozilla-nspr2.11.0-2.1 lock rpm
Netscape Portable Runtimemozilla-nspr-devel4.12-29.1 lock src
Netscape Portable Runtime development filesmozilla-nss4.12-29.1 lock rpm
Network Security Servicesmozilla-nss-devel3.21.1-35.1 lock src
Network (Netscape) Security Services development files3.21.1-35.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel45.2.0esr-45.2 lock src
Devel package for Firefoxfirefox-fontconfig45.2.0esr-45.2 lock rpm
Library for Font Configurationfirefox-fontconfig-devel2.11.0-2.1 lock src
Include Files and Libraries mandatory for Developmentmozilla-nspr2.11.0-2.1 lock rpm
Netscape Portable Runtimemozilla-nspr-devel4.12-29.1 lock src
Netscape Portable Runtime development filesmozilla-nss4.12-29.1 lock rpm
Network Security Servicesmozilla-nss-devel3.21.1-35.1 lock src
Network (Netscape) Security Services development files3.21.1-35.1 lock rpm