SUSE-SU-2015:1269-1

Advisory lineage Upstream: 17 Downstream: 0
Published: 14 Jul 2015, 10:29
Last modified:04 Feb 2026, 02:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Jul 2015, 10:29
Published
Vulnerability first disclosed
04 Feb 2026, 02:31
Last Modified
Vulnerability information updated

Description

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).

Affected Systems

  • suse•mozilla-nspr&distro=SUSE Linux Enterprise Desktop 12

    < 4.10.8-3.1

  • suse•mozilla-nspr&distro=SUSE Linux Enterprise Server 12

    < 4.10.8-3.1

  • suse•mozilla-nspr&distro=SUSE Linux Enterprise Server for SAP Applications 12

    < 4.10.8-3.1

  • suse•mozilla-nspr&distro=SUSE Linux Enterprise Software Development Kit 12

    < 4.10.8-3.1

  • suse•mozilla-nss&distro=SUSE Linux Enterprise Desktop 12

    < 3.19.2_CKBI_1.98-21.1

  • suse•mozilla-nss&distro=SUSE Linux Enterprise Server 12

    < 3.19.2_CKBI_1.98-21.1

  • suse•mozilla-nss&distro=SUSE Linux Enterprise Server for SAP Applications 12

    < 3.19.2_CKBI_1.98-21.1

  • suse•mozilla-nss&distro=SUSE Linux Enterprise Software Development Kit 12

    < 3.19.2_CKBI_1.98-21.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12

    < 31.8.0esr-37.3

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 12

    < 31.8.0esr-37.3

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12

    < 31.8.0esr-37.3

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12

    < 31.8.0esr-37.3

References (21)