SUSE-SU-2016:1799-1
Vulnerability Summary
Timeline
Description
Security update for MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss were updated to fix nine security issues. MozillaFirefox was updated to version 45.2.0 ESR. mozilla-nss was updated to version 3.21.1. These security issues were fixed: - CVE-2016-2834: Memory safety bugs in NSS (MFSA 2016-61) (bsc#983639). - CVE-2016-2824: Out-of-bounds write with WebGL shader (MFSA 2016-53) (bsc#983651). - CVE-2016-2822: Addressbar spoofing though the SELECT element (MFSA 2016-52) (bsc#983652). - CVE-2016-2821: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51) (bsc#983653). - CVE-2016-2819: Buffer overflow parsing HTML5 fragments (MFSA 2016-50) (bsc#983655). - CVE-2016-2828: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56) (bsc#983646). - CVE-2016-2831: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58) (bsc#983643). - CVE-2016-2815, CVE-2016-2818: Miscellaneous memory safety hazards (MFSA 2016-49) (bsc#983638) These non-security issues were fixed: - Fix crashes on aarch64 * Determine page size at runtime (bsc#984006) * Allow aarch64 to work in safe mode (bsc#985659) - Fix crashes on mainframes All extensions must now be signed by addons.mozilla.org. Please read README.SUSE for more details.
Affected Systems
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Server 11 SP3-LTSS
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Server 11 SP4
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Manager 2.1
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE Manager Proxy 2.1
< 2.11.0-2.1
- suse•firefox-fontconfig&distro=SUSE OpenStack Cloud 5
< 2.11.0-2.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Server 11 SP3-LTSS
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Server 11 SP4
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Manager 2.1
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE Manager Proxy 2.1
< 4.12-29.1
- suse•mozilla-nspr&distro=SUSE OpenStack Cloud 5
< 4.12-29.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Server 11 SP3-LTSS
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Server 11 SP4
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Manager 2.1
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE Manager Proxy 2.1
< 3.21.1-35.1
- suse•mozilla-nss&distro=SUSE OpenStack Cloud 5
< 3.21.1-35.1
- suse•MozillaFirefox-branding-SLED&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Linux Enterprise Server 11 SP3-LTSS
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Linux Enterprise Server 11 SP4
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Manager 2.1
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE Manager Proxy 2.1
< 45.0-23.10
- suse•MozillaFirefox-branding-SLED&distro=SUSE OpenStack Cloud 5
< 45.0-23.10
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP3-LTSS
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP4
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Manager 2.1
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE Manager Proxy 2.1
< 45.2.0esr-45.2
- suse•MozillaFirefox&distro=SUSE OpenStack Cloud 5
< 45.2.0esr-45.2
References (21)
- https://www.suse.com/support/update/announcement/2016/suse-su-20161799-1/
- https://bugzilla.suse.com/983549
- https://bugzilla.suse.com/983638
- https://bugzilla.suse.com/983639
- https://bugzilla.suse.com/983643
- https://bugzilla.suse.com/983646
- https://bugzilla.suse.com/983651
- https://bugzilla.suse.com/983652
- https://bugzilla.suse.com/983653
- https://bugzilla.suse.com/983655
- https://bugzilla.suse.com/984006
- https://bugzilla.suse.com/985659
- https://www.suse.com/security/cve/CVE-2016-2815
- https://www.suse.com/security/cve/CVE-2016-2818
- https://www.suse.com/security/cve/CVE-2016-2819
- https://www.suse.com/security/cve/CVE-2016-2821
- https://www.suse.com/security/cve/CVE-2016-2822
- https://www.suse.com/security/cve/CVE-2016-2824
- https://www.suse.com/security/cve/CVE-2016-2828
- https://www.suse.com/security/cve/CVE-2016-2831
- https://www.suse.com/security/cve/CVE-2016-2834