1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2015:1476-1

[SUSE-SU-2015:1476-1] Security update for MozillaFirefox, mozilla-nss

Severity Important
Affected Packages 54
CVEs 16
Info Packages References Vulnerabilities

Security update for MozillaFirefox, mozilla-nss

Mozilla Firefox was updated to version 38.2.1 ESR to fix several
critical and non critical security vulnerabilities.

  • Firefox was updated to 38.2.1 ESR (bsc#943608)

    • MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during restyling
    • MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on notification bypass through data URLs

  • Firefox was updated to 38.2.0 ESR (bsc#940806)

    • MFSA 2015-78/CVE-2015-4495 (bmo#1178058, bmo#1179262) Same origin violation and local file stealing via PDF reader
    • MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 (bmo#1143130, bmo#1161719, bmo#1177501, bmo#1181204, bmo#1184068, bmo#1188590, bmo#1146213, bmo#1178890, bmo#1182711) Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
    • MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file
    • MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties
    • MFSA 2015-83/CVE-2015-4479 (bmo#1185115, bmo#1144107, bmo#1170344, bmo#1186718) Overflow issues in libstagefright
    • MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript
    • MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images
    • MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video
    • MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 (bmo#1176270, bmo#1182723, bmo#1171603) Vulnerabilities found through code inspection
    • MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers

Mozilla NSS switched the CKBI ABI from 1.98 to 2.4, which is what Firefox 38ESR uses.

Package Affected Version
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sled-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sled-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox-translations?arch=ppc64le&distro=sles-12 < 38.2.1esr-45.1
pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=x86_64&distro=sles-12 < 31.0-14.1
pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=x86_64&distro=sled-12 < 31.0-14.1
pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=s390x&distro=sles-12 < 31.0-14.1
pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=ppc64le&distro=sles-12 < 31.0-14.1
pkg:rpm/suse/mozilla-nss?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-tools?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-tools?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-tools?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-tools?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs-32bit?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-certs-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-32bit?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/mozilla-nss-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-hmac?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-hmac?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-hmac?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-hmac-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-hmac-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-32bit?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/libsoftokn3-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-hmac?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-hmac?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-hmac?arch=ppc64le&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-hmac-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-hmac-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-32bit?arch=x86_64&distro=sles-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-32bit?arch=x86_64&distro=sled-12 < 3.19.2.0-26.2
pkg:rpm/suse/libfreebl3-32bit?arch=s390x&distro=sles-12 < 3.19.2.0-26.2
ID
SUSE-SU-2015:1476-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2015/suse-su-20151476-1/
Published
2015-09-01T17:33:17
(9 years ago)
Modified
2015-09-01T17:33:17
(9 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1476-1.json
Suse URL for SUSE-SU-2015:1476-1 https://www.suse.com/support/update/announcement/2015/suse-su-20151476-1/
Suse E-Mail link for SUSE-SU-2015:1476-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001562.html
Bugzilla SUSE Bug 940806 https://bugzilla.suse.com/940806
Bugzilla SUSE Bug 943557 https://bugzilla.suse.com/943557
Bugzilla SUSE Bug 943558 https://bugzilla.suse.com/943558
Bugzilla SUSE Bug 943608 https://bugzilla.suse.com/943608
CVE SUSE CVE CVE-2015-4473 page https://www.suse.com/security/cve/CVE-2015-4473/
CVE SUSE CVE CVE-2015-4474 page https://www.suse.com/security/cve/CVE-2015-4474/
CVE SUSE CVE CVE-2015-4475 page https://www.suse.com/security/cve/CVE-2015-4475/
CVE SUSE CVE CVE-2015-4478 page https://www.suse.com/security/cve/CVE-2015-4478/
CVE SUSE CVE CVE-2015-4479 page https://www.suse.com/security/cve/CVE-2015-4479/
CVE SUSE CVE CVE-2015-4484 page https://www.suse.com/security/cve/CVE-2015-4484/
CVE SUSE CVE CVE-2015-4485 page https://www.suse.com/security/cve/CVE-2015-4485/
CVE SUSE CVE CVE-2015-4486 page https://www.suse.com/security/cve/CVE-2015-4486/
CVE SUSE CVE CVE-2015-4487 page https://www.suse.com/security/cve/CVE-2015-4487/
CVE SUSE CVE CVE-2015-4488 page https://www.suse.com/security/cve/CVE-2015-4488/
CVE SUSE CVE CVE-2015-4489 page https://www.suse.com/security/cve/CVE-2015-4489/
CVE SUSE CVE CVE-2015-4491 page https://www.suse.com/security/cve/CVE-2015-4491/
CVE SUSE CVE CVE-2015-4492 page https://www.suse.com/security/cve/CVE-2015-4492/
CVE SUSE CVE CVE-2015-4495 page https://www.suse.com/security/cve/CVE-2015-4495/
CVE SUSE CVE CVE-2015-4497 page https://www.suse.com/security/cve/CVE-2015-4497/
CVE SUSE CVE CVE-2015-4498 page https://www.suse.com/security/cve/CVE-2015-4498/
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12 suse MozillaFirefox < 38.2.1esr-45.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sled-12 suse MozillaFirefox < 38.2.1esr-45.1 sled-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12 suse MozillaFirefox < 38.2.1esr-45.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12 suse MozillaFirefox < 38.2.1esr-45.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-12 suse MozillaFirefox-translations < 38.2.1esr-45.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sled-12 suse MozillaFirefox-translations < 38.2.1esr-45.1 sled-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-12 suse MozillaFirefox-translations < 38.2.1esr-45.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=ppc64le&distro=sles-12 suse MozillaFirefox-translations < 38.2.1esr-45.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=x86_64&distro=sles-12 suse MozillaFirefox-branding-SLE < 31.0-14.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=x86_64&distro=sled-12 suse MozillaFirefox-branding-SLE < 31.0-14.1 sled-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=s390x&distro=sles-12 suse MozillaFirefox-branding-SLE < 31.0-14.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-branding-SLE?arch=ppc64le&distro=sles-12 suse MozillaFirefox-branding-SLE < 31.0-14.1 sles-12 ppc64le
Affected pkg:rpm/suse/mozilla-nss?arch=x86_64&distro=sles-12 suse mozilla-nss < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/mozilla-nss?arch=x86_64&distro=sled-12 suse mozilla-nss < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/mozilla-nss?arch=s390x&distro=sles-12 suse mozilla-nss < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/mozilla-nss?arch=ppc64le&distro=sles-12 suse mozilla-nss < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/mozilla-nss-tools?arch=x86_64&distro=sles-12 suse mozilla-nss-tools < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-tools?arch=x86_64&distro=sled-12 suse mozilla-nss-tools < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-tools?arch=s390x&distro=sles-12 suse mozilla-nss-tools < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/mozilla-nss-tools?arch=ppc64le&distro=sles-12 suse mozilla-nss-tools < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/mozilla-nss-certs?arch=x86_64&distro=sles-12 suse mozilla-nss-certs < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-certs?arch=x86_64&distro=sled-12 suse mozilla-nss-certs < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-certs?arch=s390x&distro=sles-12 suse mozilla-nss-certs < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/mozilla-nss-certs?arch=ppc64le&distro=sles-12 suse mozilla-nss-certs < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/mozilla-nss-certs-32bit?arch=x86_64&distro=sles-12 suse mozilla-nss-certs-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-certs-32bit?arch=x86_64&distro=sled-12 suse mozilla-nss-certs-32bit < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-certs-32bit?arch=s390x&distro=sles-12 suse mozilla-nss-certs-32bit < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/mozilla-nss-32bit?arch=x86_64&distro=sles-12 suse mozilla-nss-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-32bit?arch=x86_64&distro=sled-12 suse mozilla-nss-32bit < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/mozilla-nss-32bit?arch=s390x&distro=sles-12 suse mozilla-nss-32bit < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libsoftokn3?arch=x86_64&distro=sles-12 suse libsoftokn3 < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libsoftokn3?arch=x86_64&distro=sled-12 suse libsoftokn3 < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/libsoftokn3?arch=s390x&distro=sles-12 suse libsoftokn3 < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libsoftokn3?arch=ppc64le&distro=sles-12 suse libsoftokn3 < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/libsoftokn3-hmac?arch=x86_64&distro=sles-12 suse libsoftokn3-hmac < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libsoftokn3-hmac?arch=s390x&distro=sles-12 suse libsoftokn3-hmac < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libsoftokn3-hmac?arch=ppc64le&distro=sles-12 suse libsoftokn3-hmac < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/libsoftokn3-hmac-32bit?arch=x86_64&distro=sles-12 suse libsoftokn3-hmac-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libsoftokn3-hmac-32bit?arch=s390x&distro=sles-12 suse libsoftokn3-hmac-32bit < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libsoftokn3-32bit?arch=x86_64&distro=sles-12 suse libsoftokn3-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libsoftokn3-32bit?arch=x86_64&distro=sled-12 suse libsoftokn3-32bit < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/libsoftokn3-32bit?arch=s390x&distro=sles-12 suse libsoftokn3-32bit < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libfreebl3?arch=x86_64&distro=sles-12 suse libfreebl3 < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libfreebl3?arch=x86_64&distro=sled-12 suse libfreebl3 < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/libfreebl3?arch=s390x&distro=sles-12 suse libfreebl3 < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libfreebl3?arch=ppc64le&distro=sles-12 suse libfreebl3 < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/libfreebl3-hmac?arch=x86_64&distro=sles-12 suse libfreebl3-hmac < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libfreebl3-hmac?arch=s390x&distro=sles-12 suse libfreebl3-hmac < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libfreebl3-hmac?arch=ppc64le&distro=sles-12 suse libfreebl3-hmac < 3.19.2.0-26.2 sles-12 ppc64le
Affected pkg:rpm/suse/libfreebl3-hmac-32bit?arch=x86_64&distro=sles-12 suse libfreebl3-hmac-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libfreebl3-hmac-32bit?arch=s390x&distro=sles-12 suse libfreebl3-hmac-32bit < 3.19.2.0-26.2 sles-12 s390x
Affected pkg:rpm/suse/libfreebl3-32bit?arch=x86_64&distro=sles-12 suse libfreebl3-32bit < 3.19.2.0-26.2 sles-12 x86_64
Affected pkg:rpm/suse/libfreebl3-32bit?arch=x86_64&distro=sled-12 suse libfreebl3-32bit < 3.19.2.0-26.2 sled-12 x86_64
Affected pkg:rpm/suse/libfreebl3-32bit?arch=s390x&distro=sles-12 suse libfreebl3-32bit < 3.19.2.0-26.2 sles-12 s390x
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date