Lucene search

K
suseSuseSUSE-SU-2016:0334-1
HistoryFeb 04, 2016 - 7:11 p.m.

Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nss (important)

2016-02-0419:11:54
lists.opensuse.org
12

0.006 Low

EPSS

Percentile

75.1%

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss
fixes the following issues: (bsc#963520)

Mozilla Firefox was updated to 38.6.0 ESR. Mozilla NSS was updated to
3.20.2.

The following vulnerabilities were fixed:

  • CVE-2016-1930: Memory safety bugs fixed in Firefox ESR 38.6 (bsc#963632)
  • CVE-2016-1935: Buffer overflow in WebGL after out of memory allocation
    (bsc#963635)
  • CVE-2016-1938: Calculations with mp_div and mp_exptmod in Network
    Security Services (NSS) canproduce wrong results (bsc#963731)

The following improvements were added:

  • bsc#954447: Mozilla NSS now supports a number of new DHE ciphersuites
  • Tracking protection is now enabled by default