SUSE-SU-2015:1981-1 -- SLES MozillaFirefox, libfreebl3, libsoftokn3, mozilla-nspr, mozilla-nssID: oval:org.secpod.oval:def:89045435 | Date: (C)2021-08-04 (M)2024-01-29 |
Class: PATCH | Family: unix |
This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 * MFSA 2015-133/CVE-2015-7183 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 NSS and NSPR memory corruption issues - MozillaFirefox was updated to 38.4.0 ESR * MFSA 2015-116/CVE-2015-4513 Miscellaneous memory safety hazards * MFSA 2015-122/CVE-2015-7188 Trailing whitespace in IP address hostnames can bypass same-origin policy * MFSA 2015-123/CVE-2015-7189 Buffer overflow during image interactions in canvas * MFSA 2015-127/CVE-2015-7193 CORS preflight is bypassed when non-standard Content-Type headers are received * MFSA 2015-128/CVE-2015-7194 Memory corruption in libjar through zip files * MFSA 2015-130/CVE-2015-7196 JavaScript garbage collection crash with Java applet * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 Vulnerabilities found through code inspection * MFSA 2015-132/CVE-2015-7197 Mixed content WebSocket policy bypass through workers * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 NSS and NSPR memory corruption issues - fix printing on landscape media
Platform: |
SUSE Linux Enterprise Server 11 SP4 |
Product: |
MozillaFirefox |
libfreebl3 |
libsoftokn3 |
mozilla-nspr |
mozilla-nss |