SUSE-SU-2016:1799-1

    Dashboard / Vulnerabilities / SUSE-SU-2016:1799-1

    SUSE-SU-2016:1799-1

    Published: 14 Jul 2016Last Modified: 4 Feb 2026

    Summary: Security update for MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss

    Details: MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss were updated to fix nine security issues. MozillaFirefox was updated to version 45.2.0 ESR. mozilla-nss was updated to version 3.21.1. These security issues were fixed: - CVE-2016-2834: Memory safety bugs in NSS (MFSA 2016-61) (bsc#983639). - CVE-2016-2824: Out-of-bounds write with WebGL shader (MFSA 2016-53) (bsc#983651). - CVE-2016-2822: Addressbar spoofing though the SELECT element (MFSA 2016-52) (bsc#983652). - CVE-2016-2821: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51) (bsc#983653). - CVE-2016-2819: Buffer overflow parsing HTML5 fragments (MFSA 2016-50) (bsc#983655). - CVE-2016-2828: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56) (bsc#983646). - CVE-2016-2831: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58) (bsc#983643). - CVE-2016-2815, CVE-2016-2818: Miscellaneous memory safety hazards (MFSA 2016-49) (bsc#983638) These non-security issues were fixed: - Fix crashes on aarch64 * Determine page size at runtime (bsc#984006) * Allow aarch64 to work in safe mode (bsc#985659) - Fix crashes on mainframes All extensions must now be signed by addons.mozilla.org. Please read README.SUSE for more details.

    References: https://www.suse.com/support/update/announcement/2016/suse-su-20161799-1/, https://bugzilla.suse.com/983549, https://bugzilla.suse.com/983638, https://bugzilla.suse.com/983639, https://bugzilla.suse.com/983643, https://bugzilla.suse.com/983646, https://bugzilla.suse.com/983651, https://bugzilla.suse.com/983652, https://bugzilla.suse.com/983653, https://bugzilla.suse.com/983655, https://bugzilla.suse.com/984006, https://bugzilla.suse.com/985659, https://www.suse.com/security/cve/CVE-2016-2815, https://www.suse.com/security/cve/CVE-2016-2818, https://www.suse.com/security/cve/CVE-2016-2819, https://www.suse.com/security/cve/CVE-2016-2821, https://www.suse.com/security/cve/CVE-2016-2822, https://www.suse.com/security/cve/CVE-2016-2824, https://www.suse.com/security/cve/CVE-2016-2828, https://www.suse.com/security/cve/CVE-2016-2831, https://www.suse.com/security/cve/CVE-2016-2834

    Affected packages

    Package

    Name: MozillaFirefox

    Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -45.2.0esr-45.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2016:1799-1 | CVE-DB