{"affected":[{"ecosystem_specific":{"binaries":[{"MozillaFirefox":"38.6.1esr-33.1","MozillaFirefox-branding-SLED":"38-15.58","MozillaFirefox-translations":"38.6.1esr-33.1","libfreebl3":"3.20.2-17.5","libfreebl3-32bit":"3.20.2-17.5","mozilla-nss":"3.20.2-17.5","mozilla-nss-32bit":"3.20.2-17.5","mozilla-nss-devel":"3.20.2-17.5","mozilla-nss-tools":"3.20.2-17.5"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","name":"MozillaFirefox","purl":"purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"38.6.1esr-33.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"MozillaFirefox":"38.6.1esr-33.1","MozillaFirefox-branding-SLED":"38-15.58","MozillaFirefox-translations":"38.6.1esr-33.1","libfreebl3":"3.20.2-17.5","libfreebl3-32bit":"3.20.2-17.5","mozilla-nss":"3.20.2-17.5","mozilla-nss-32bit":"3.20.2-17.5","mozilla-nss-devel":"3.20.2-17.5","mozilla-nss-tools":"3.20.2-17.5"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","name":"MozillaFirefox-branding-SLED","purl":"purl:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"38-15.58"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"MozillaFirefox":"38.6.1esr-33.1","MozillaFirefox-branding-SLED":"38-15.58","MozillaFirefox-translations":"38.6.1esr-33.1","libfreebl3":"3.20.2-17.5","libfreebl3-32bit":"3.20.2-17.5","mozilla-nss":"3.20.2-17.5","mozilla-nss-32bit":"3.20.2-17.5","mozilla-nss-devel":"3.20.2-17.5","mozilla-nss-tools":"3.20.2-17.5"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","name":"mozilla-nss","purl":"purl:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.20.2-17.5"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues: \n\nFirefox 38.6.1 ESR (bsc#967087)\n\nThe following vulnerabilities were fixed:\n\n- CVE-2016-1523: Fixed denial of service in Graphite 2 library (MFSA 2016-14/bmo#1246093)\n\nFirefox 38.6.0 ESR + Mozilla NSS 3.20.2. (bsc#963520)\n\nThe following vulnerabilities were fixed:\n\n- CVE-2016-1930: Memory safety bugs fixed in Firefox ESR 38.6 (bsc#963632)\n- CVE-2016-1935: Buffer overflow in WebGL after out of memory allocation (bsc#963635)\n- CVE-2016-1938: Calculations with mp_div and mp_exptmod in Network Security Services (NSS) canproduce wrong results (bsc#963731)\n- CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature (bsc#959888)\n\nThe following improvements were added:\n\n- bsc#954447: Mozilla NSS now supports a number of new DHE ciphersuites\n- Tracking protection is now enabled by default\n","id":"SUSE-SU-2016:0584-1","modified":"2016-02-25T15:19:11Z","published":"2016-02-25T15:19:11Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160584-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/954447"},{"type":"REPORT","url":"https://bugzilla.suse.com/959888"},{"type":"REPORT","url":"https://bugzilla.suse.com/963520"},{"type":"REPORT","url":"https://bugzilla.suse.com/963632"},{"type":"REPORT","url":"https://bugzilla.suse.com/963635"},{"type":"REPORT","url":"https://bugzilla.suse.com/963731"},{"type":"REPORT","url":"https://bugzilla.suse.com/967087"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-7575"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-1523"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-1930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-1935"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-1938"}],"related":["CVE-2015-7575","CVE-2016-1523","CVE-2016-1930","CVE-2016-1935","CVE-2016-1938"],"summary":"Security update for MozillaFirefox, MozillaFirefox-branding-SLED, MozillaFirefox-branding-SLES-for-VMware, mozilla-nss"}