| Revision Date: | 2018-12-21 | Version: | 1 |
| Title: | Security update for MozillaFirefox, mozilla-nspr and mozilla-nss (Important) |
| Description: |
This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:
Issues fixed in MozillaFirefox:
- Update to Firefox ESR 60.4 (bsc#1119105) - CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 - CVE-2018-18492: Fixed a use-after-free with select element - CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia - CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs - CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images - CVE-2018-12405: Fixed a few memory safety bugs
Issues fixed in mozilla-nss:
- Update to NSS 3.40.1 (bsc#1119105) - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069) - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873) - CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410) - Fixed a decryption failure during FFDHE key exchange - Various security fixes in the ASN.1 code
Issues fixed in mozilla-nspr:
- Update mozilla-nspr to 4.20 (bsc#1119105)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1097410
1106873
1119069
1119105
CVE-2018-0495
CVE-2018-12384
CVE-2018-12404
CVE-2018-12405
CVE-2018-17466
CVE-2018-18492
CVE-2018-18493
CVE-2018-18494
CVE-2018-18498
SUSE-SU-2018:4236-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 12 SP4
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information
MozillaFirefox-60.4.0esr-109.55.1 is installed
OR MozillaFirefox-translations-common-60.4.0esr-109.55.1 is installed
OR libfreebl3-3.40.1-58.18.1 is installed
OR libfreebl3-32bit-3.40.1-58.18.1 is installed
OR libsoftokn3-3.40.1-58.18.1 is installed
OR libsoftokn3-32bit-3.40.1-58.18.1 is installed
OR mozilla-nspr-4.20-19.6.1 is installed
OR mozilla-nspr-32bit-4.20-19.6.1 is installed
OR mozilla-nss-3.40.1-58.18.1 is installed
OR mozilla-nss-32bit-3.40.1-58.18.1 is installed
OR mozilla-nss-certs-3.40.1-58.18.1 is installed
OR mozilla-nss-certs-32bit-3.40.1-58.18.1 is installed
OR mozilla-nss-sysinit-3.40.1-58.18.1 is installed
OR mozilla-nss-sysinit-32bit-3.40.1-58.18.1 is installed
OR mozilla-nss-tools-3.40.1-58.18.1 is installed
|