gpp_maybe Security update for mozillafirefox, mozillafirefox-branding-sled, mozilla-nss

sdksp4-mozilla-12383

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues: (bsc#963520) Mozilla Firefox was updated to 38.6.0 ESR. Mozilla NSS was updated to 3.20.2. The following vulnerabilities were fixed: - CVE-2016-1930: Memory safety bugs fixed in Firefox ESR 38.6 (bsc#963632) - CVE-2016-1935: Buffer overflow in WebGL after out of memory allocation (bsc#963635) - CVE-2016-1938: Calculations with mp_div and mp_exptmod in Network Security Services (NSS) canproduce wrong results (bsc#963731) The following improvements were added: - bsc#954447: Mozilla NSS now supports a number of new DHE ciphersuites - Tracking protection is now enabled by default

• Release Date
  Feb 4 2016
• References
  Bugzilla: 954447, 963731, 963632, 963635, 963520
  CVEs: CVE-2016-1935, CVE-2016-1938, CVE-2016-1930
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  38.6.0esr-31.3 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  38.6.0esr-31.3 lock rpm

  mozilla-nss
  Network Security Services

  3.20.2-25.2 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.20.2-25.2 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  38.6.0esr-31.3 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  38.6.0esr-31.3 lock rpm

  mozilla-nss
  Network Security Services

  3.20.2-25.2 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.20.2-25.2 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  38.6.0esr-31.3 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  38.6.0esr-31.3 lock rpm

  mozilla-nss
  Network Security Services

  3.20.2-25.2 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.20.2-25.2 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  38.6.0esr-31.3 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  38.6.0esr-31.3 lock rpm

  mozilla-nss
  Network Security Services

  3.20.2-25.2 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.20.2-25.2 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  38.6.0esr-31.3 lock src

  MozillaFirefox-devel
  Devel package for Firefox

  38.6.0esr-31.3 lock rpm

  mozilla-nss
  Network Security Services

  3.20.2-25.2 lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.20.2-25.2 lock rpm