suse-su-2016:2061-1
Vulnerability from csaf_suse
Published
2016-08-12 16:10
Modified
2016-08-12 16:10
Summary
Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss
Notes
Title of the patch
Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss
Description of the patch
MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr and mozilla-nss were updated to fix nine security issues.
MozillaFirefox was updated to version 45.3.0 ESR. mozilla-nss was updated to version 3.21.1, mozilla-nspr to version 4.12.
These security issues were fixed in 45.3.0ESR:
- CVE-2016-2835/CVE-2016-2836: Miscellaneous memory safety hazards (rv:48.0 / rv:45.3) (MFSA 2016-62)
- CVE-2016-2830: Favicon network connection can persist when page is closed (MFSA 2016-63)
- CVE-2016-2838: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)
- CVE-2016-2839: Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 (MFSA 2016-65)
- CVE-2016-5252: Stack underflow during 2D graphics rendering (MFSA 2016-67)
- CVE-2016-5254: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)
- CVE-2016-5258: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)
- CVE-2016-5259: Use-after-free in service workers with nested sync events (MFSA 2016-73)
- CVE-2016-5262: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)
- CVE-2016-2837: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback (MFSA 2016-77)
- CVE-2016-5263: Type confusion in display transformation (MFSA 2016-78)
- CVE-2016-5264: Use-after-free when applying SVG effects (MFSA 2016-79)
- CVE-2016-5265: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)
- CVE-2016-6354: Fix for possible buffer overrun (bsc#990856)
Security issues fixed in 45.2.0.ESR:
- CVE-2016-2834: Memory safety bugs in NSS (MFSA 2016-61) (bsc#983639).
- CVE-2016-2824: Out-of-bounds write with WebGL shader (MFSA 2016-53) (bsc#983651).
- CVE-2016-2822: Addressbar spoofing though the SELECT element (MFSA 2016-52) (bsc#983652).
- CVE-2016-2821: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51) (bsc#983653).
- CVE-2016-2819: Buffer overflow parsing HTML5 fragments (MFSA 2016-50) (bsc#983655).
- CVE-2016-2828: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56) (bsc#983646).
- CVE-2016-2831: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58) (bsc#983643).
- CVE-2016-2815, CVE-2016-2818: Miscellaneous memory safety hazards (MFSA 2016-49) (bsc#983638)
These non-security issues were fixed:
- Fix crashes on aarch64
* Determine page size at runtime (bsc#984006)
* Allow aarch64 to work in safe mode (bsc#985659)
- Fix crashes on mainframes
- Temporarily bind Firefox to the first CPU as a hotfix
for an apparent race condition (bsc#989196, bsc#990628)
All extensions must now be signed by addons.mozilla.org. Please read README.SUSE for more details.
Patchnames
slessp2-MozillaFirefox-12690
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss",
"title": "Title of the patch"
},
{
"category": "description",
"text": "MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr and mozilla-nss were updated to fix nine security issues.\n\nMozillaFirefox was updated to version 45.3.0 ESR. mozilla-nss was updated to version 3.21.1, mozilla-nspr to version 4.12.\n\nThese security issues were fixed in 45.3.0ESR:\n- CVE-2016-2835/CVE-2016-2836: Miscellaneous memory safety hazards (rv:48.0 / rv:45.3) (MFSA 2016-62)\n- CVE-2016-2830: Favicon network connection can persist when page is closed (MFSA 2016-63)\n- CVE-2016-2838: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)\n- CVE-2016-2839: Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 (MFSA 2016-65)\n- CVE-2016-5252: Stack underflow during 2D graphics rendering (MFSA 2016-67)\n- CVE-2016-5254: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)\n- CVE-2016-5258: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)\n- CVE-2016-5259: Use-after-free in service workers with nested sync events (MFSA 2016-73)\n- CVE-2016-5262: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)\n- CVE-2016-2837: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback (MFSA 2016-77)\n- CVE-2016-5263: Type confusion in display transformation (MFSA 2016-78)\n- CVE-2016-5264: Use-after-free when applying SVG effects (MFSA 2016-79)\n- CVE-2016-5265: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)\n- CVE-2016-6354: Fix for possible buffer overrun (bsc#990856)\n\nSecurity issues fixed in 45.2.0.ESR:\n- CVE-2016-2834: Memory safety bugs in NSS (MFSA 2016-61) (bsc#983639).\n- CVE-2016-2824: Out-of-bounds write with WebGL shader (MFSA 2016-53) (bsc#983651).\n- CVE-2016-2822: Addressbar spoofing though the SELECT element (MFSA 2016-52) (bsc#983652).\n- CVE-2016-2821: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51) (bsc#983653).\n- CVE-2016-2819: Buffer overflow parsing HTML5 fragments (MFSA 2016-50) (bsc#983655).\n- CVE-2016-2828: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56) (bsc#983646).\n- CVE-2016-2831: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58) (bsc#983643).\n- CVE-2016-2815, CVE-2016-2818: Miscellaneous memory safety hazards (MFSA 2016-49) (bsc#983638)\n\nThese non-security issues were fixed:\n- Fix crashes on aarch64\n * Determine page size at runtime (bsc#984006)\n * Allow aarch64 to work in safe mode (bsc#985659)\n- Fix crashes on mainframes\n- Temporarily bind Firefox to the first CPU as a hotfix\n for an apparent race condition (bsc#989196, bsc#990628)\n\nAll extensions must now be signed by addons.mozilla.org. Please read README.SUSE for more details.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp2-MozillaFirefox-12690",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2061-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:2061-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162061-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:2061-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-August/002206.html"
},
{
"category": "self",
"summary": "SUSE Bug 983549",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "self",
"summary": "SUSE Bug 983638",
"url": "https://bugzilla.suse.com/983638"
},
{
"category": "self",
"summary": "SUSE Bug 983639",
"url": "https://bugzilla.suse.com/983639"
},
{
"category": "self",
"summary": "SUSE Bug 983643",
"url": "https://bugzilla.suse.com/983643"
},
{
"category": "self",
"summary": "SUSE Bug 983646",
"url": "https://bugzilla.suse.com/983646"
},
{
"category": "self",
"summary": "SUSE Bug 983651",
"url": "https://bugzilla.suse.com/983651"
},
{
"category": "self",
"summary": "SUSE Bug 983652",
"url": "https://bugzilla.suse.com/983652"
},
{
"category": "self",
"summary": "SUSE Bug 983653",
"url": "https://bugzilla.suse.com/983653"
},
{
"category": "self",
"summary": "SUSE Bug 983655",
"url": "https://bugzilla.suse.com/983655"
},
{
"category": "self",
"summary": "SUSE Bug 984006",
"url": "https://bugzilla.suse.com/984006"
},
{
"category": "self",
"summary": "SUSE Bug 985659",
"url": "https://bugzilla.suse.com/985659"
},
{
"category": "self",
"summary": "SUSE Bug 989196",
"url": "https://bugzilla.suse.com/989196"
},
{
"category": "self",
"summary": "SUSE Bug 990628",
"url": "https://bugzilla.suse.com/990628"
},
{
"category": "self",
"summary": "SUSE Bug 990856",
"url": "https://bugzilla.suse.com/990856"
},
{
"category": "self",
"summary": "SUSE Bug 991809",
"url": "https://bugzilla.suse.com/991809"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2815 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2819 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2822 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2824 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2828 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2831 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2834 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2835 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2836 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2837 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2838 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2839 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5252 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5254 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5258 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5259 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5259/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5262 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5263 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5264 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5264/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5265 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6354 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6354/"
}
],
"title": "Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss",
"tracking": {
"current_release_date": "2016-08-12T16:10:10Z",
"generator": {
"date": "2016-08-12T16:10:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:2061-1",
"initial_release_date": "2016-08-12T16:10:10Z",
"revision_history": [
{
"date": "2016-08-12T16:10:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-45.3.0esr-48.1.i586",
"product": {
"name": "MozillaFirefox-45.3.0esr-48.1.i586",
"product_id": "MozillaFirefox-45.3.0esr-48.1.i586"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-SLED-45.0-20.38.i586",
"product": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.i586",
"product_id": "MozillaFirefox-branding-SLED-45.0-20.38.i586"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-45.3.0esr-48.1.i586",
"product": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.i586",
"product_id": "MozillaFirefox-translations-45.3.0esr-48.1.i586"
}
},
{
"category": "product_version",
"name": "firefox-fontconfig-2.11.0-4.2.i586",
"product": {
"name": "firefox-fontconfig-2.11.0-4.2.i586",
"product_id": "firefox-fontconfig-2.11.0-4.2.i586"
}
},
{
"category": "product_version",
"name": "libfreebl3-3.21.1-26.2.i586",
"product": {
"name": "libfreebl3-3.21.1-26.2.i586",
"product_id": "libfreebl3-3.21.1-26.2.i586"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.12-25.2.i586",
"product": {
"name": "mozilla-nspr-4.12-25.2.i586",
"product_id": "mozilla-nspr-4.12-25.2.i586"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.12-25.2.i586",
"product": {
"name": "mozilla-nspr-devel-4.12-25.2.i586",
"product_id": "mozilla-nspr-devel-4.12-25.2.i586"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.21.1-26.2.i586",
"product": {
"name": "mozilla-nss-3.21.1-26.2.i586",
"product_id": "mozilla-nss-3.21.1-26.2.i586"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.21.1-26.2.i586",
"product": {
"name": "mozilla-nss-devel-3.21.1-26.2.i586",
"product_id": "mozilla-nss-devel-3.21.1-26.2.i586"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.21.1-26.2.i586",
"product": {
"name": "mozilla-nss-tools-3.21.1-26.2.i586",
"product_id": "mozilla-nss-tools-3.21.1-26.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-45.3.0esr-48.1.s390x",
"product": {
"name": "MozillaFirefox-45.3.0esr-48.1.s390x",
"product_id": "MozillaFirefox-45.3.0esr-48.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"product": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"product_id": "MozillaFirefox-branding-SLED-45.0-20.38.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"product": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"product_id": "MozillaFirefox-translations-45.3.0esr-48.1.s390x"
}
},
{
"category": "product_version",
"name": "firefox-fontconfig-2.11.0-4.2.s390x",
"product": {
"name": "firefox-fontconfig-2.11.0-4.2.s390x",
"product_id": "firefox-fontconfig-2.11.0-4.2.s390x"
}
},
{
"category": "product_version",
"name": "libfreebl3-3.21.1-26.2.s390x",
"product": {
"name": "libfreebl3-3.21.1-26.2.s390x",
"product_id": "libfreebl3-3.21.1-26.2.s390x"
}
},
{
"category": "product_version",
"name": "libfreebl3-32bit-3.21.1-26.2.s390x",
"product": {
"name": "libfreebl3-32bit-3.21.1-26.2.s390x",
"product_id": "libfreebl3-32bit-3.21.1-26.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.12-25.2.s390x",
"product": {
"name": "mozilla-nspr-4.12-25.2.s390x",
"product_id": "mozilla-nspr-4.12-25.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-32bit-4.12-25.2.s390x",
"product": {
"name": "mozilla-nspr-32bit-4.12-25.2.s390x",
"product_id": "mozilla-nspr-32bit-4.12-25.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.12-25.2.s390x",
"product": {
"name": "mozilla-nspr-devel-4.12-25.2.s390x",
"product_id": "mozilla-nspr-devel-4.12-25.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.21.1-26.2.s390x",
"product": {
"name": "mozilla-nss-3.21.1-26.2.s390x",
"product_id": "mozilla-nss-3.21.1-26.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-32bit-3.21.1-26.2.s390x",
"product": {
"name": "mozilla-nss-32bit-3.21.1-26.2.s390x",
"product_id": "mozilla-nss-32bit-3.21.1-26.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.21.1-26.2.s390x",
"product": {
"name": "mozilla-nss-devel-3.21.1-26.2.s390x",
"product_id": "mozilla-nss-devel-3.21.1-26.2.s390x"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.21.1-26.2.s390x",
"product": {
"name": "mozilla-nss-tools-3.21.1-26.2.s390x",
"product_id": "mozilla-nss-tools-3.21.1-26.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-45.3.0esr-48.1.x86_64",
"product": {
"name": "MozillaFirefox-45.3.0esr-48.1.x86_64",
"product_id": "MozillaFirefox-45.3.0esr-48.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"product": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"product_id": "MozillaFirefox-branding-SLED-45.0-20.38.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"product_id": "MozillaFirefox-translations-45.3.0esr-48.1.x86_64"
}
},
{
"category": "product_version",
"name": "firefox-fontconfig-2.11.0-4.2.x86_64",
"product": {
"name": "firefox-fontconfig-2.11.0-4.2.x86_64",
"product_id": "firefox-fontconfig-2.11.0-4.2.x86_64"
}
},
{
"category": "product_version",
"name": "libfreebl3-3.21.1-26.2.x86_64",
"product": {
"name": "libfreebl3-3.21.1-26.2.x86_64",
"product_id": "libfreebl3-3.21.1-26.2.x86_64"
}
},
{
"category": "product_version",
"name": "libfreebl3-32bit-3.21.1-26.2.x86_64",
"product": {
"name": "libfreebl3-32bit-3.21.1-26.2.x86_64",
"product_id": "libfreebl3-32bit-3.21.1-26.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.12-25.2.x86_64",
"product": {
"name": "mozilla-nspr-4.12-25.2.x86_64",
"product_id": "mozilla-nspr-4.12-25.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-32bit-4.12-25.2.x86_64",
"product": {
"name": "mozilla-nspr-32bit-4.12-25.2.x86_64",
"product_id": "mozilla-nspr-32bit-4.12-25.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nspr-devel-4.12-25.2.x86_64",
"product": {
"name": "mozilla-nspr-devel-4.12-25.2.x86_64",
"product_id": "mozilla-nspr-devel-4.12-25.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.21.1-26.2.x86_64",
"product": {
"name": "mozilla-nss-3.21.1-26.2.x86_64",
"product_id": "mozilla-nss-3.21.1-26.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-32bit-3.21.1-26.2.x86_64",
"product": {
"name": "mozilla-nss-32bit-3.21.1-26.2.x86_64",
"product_id": "mozilla-nss-32bit-3.21.1-26.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-devel-3.21.1-26.2.x86_64",
"product": {
"name": "mozilla-nss-devel-3.21.1-26.2.x86_64",
"product_id": "mozilla-nss-devel-3.21.1-26.2.x86_64"
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.21.1-26.2.x86_64",
"product": {
"name": "mozilla-nss-tools-3.21.1-26.2.x86_64",
"product_id": "mozilla-nss-tools-3.21.1-26.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-45.3.0esr-48.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586"
},
"product_reference": "MozillaFirefox-45.3.0esr-48.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-45.3.0esr-48.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x"
},
"product_reference": "MozillaFirefox-45.3.0esr-48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-45.3.0esr-48.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64"
},
"product_reference": "MozillaFirefox-45.3.0esr-48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586"
},
"product_reference": "MozillaFirefox-branding-SLED-45.0-20.38.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x"
},
"product_reference": "MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-SLED-45.0-20.38.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64"
},
"product_reference": "MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586"
},
"product_reference": "MozillaFirefox-translations-45.3.0esr-48.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x"
},
"product_reference": "MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-45.3.0esr-48.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-fontconfig-2.11.0-4.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586"
},
"product_reference": "firefox-fontconfig-2.11.0-4.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-fontconfig-2.11.0-4.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x"
},
"product_reference": "firefox-fontconfig-2.11.0-4.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-fontconfig-2.11.0-4.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64"
},
"product_reference": "firefox-fontconfig-2.11.0-4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.21.1-26.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586"
},
"product_reference": "libfreebl3-3.21.1-26.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x"
},
"product_reference": "libfreebl3-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64"
},
"product_reference": "libfreebl3-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-32bit-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x"
},
"product_reference": "libfreebl3-32bit-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-32bit-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64"
},
"product_reference": "libfreebl3-32bit-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.12-25.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586"
},
"product_reference": "mozilla-nspr-4.12-25.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.12-25.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x"
},
"product_reference": "mozilla-nspr-4.12-25.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.12-25.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64"
},
"product_reference": "mozilla-nspr-4.12-25.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-32bit-4.12-25.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x"
},
"product_reference": "mozilla-nspr-32bit-4.12-25.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-32bit-4.12-25.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64"
},
"product_reference": "mozilla-nspr-32bit-4.12-25.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.12-25.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586"
},
"product_reference": "mozilla-nspr-devel-4.12-25.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.12-25.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x"
},
"product_reference": "mozilla-nspr-devel-4.12-25.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-devel-4.12-25.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64"
},
"product_reference": "mozilla-nspr-devel-4.12-25.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.21.1-26.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586"
},
"product_reference": "mozilla-nss-3.21.1-26.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x"
},
"product_reference": "mozilla-nss-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64"
},
"product_reference": "mozilla-nss-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-32bit-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x"
},
"product_reference": "mozilla-nss-32bit-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-32bit-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64"
},
"product_reference": "mozilla-nss-32bit-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.21.1-26.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586"
},
"product_reference": "mozilla-nss-devel-3.21.1-26.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x"
},
"product_reference": "mozilla-nss-devel-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-devel-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64"
},
"product_reference": "mozilla-nss-devel-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.21.1-26.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586"
},
"product_reference": "mozilla-nss-tools-3.21.1-26.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.21.1-26.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x"
},
"product_reference": "mozilla-nss-tools-3.21.1-26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.21.1-26.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
},
"product_reference": "mozilla-nss-tools-3.21.1-26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2815"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2815",
"url": "https://www.suse.com/security/cve/CVE-2016-2815"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2815",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983638 for CVE-2016-2815",
"url": "https://bugzilla.suse.com/983638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2815"
},
{
"cve": "CVE-2016-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2818"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2818",
"url": "https://www.suse.com/security/cve/CVE-2016-2818"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2818",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983638 for CVE-2016-2818",
"url": "https://bugzilla.suse.com/983638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2818"
},
{
"cve": "CVE-2016-2819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2819"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2819",
"url": "https://www.suse.com/security/cve/CVE-2016-2819"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2819",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983655 for CVE-2016-2819",
"url": "https://bugzilla.suse.com/983655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2819"
},
{
"cve": "CVE-2016-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2821"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2821",
"url": "https://www.suse.com/security/cve/CVE-2016-2821"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2821",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983653 for CVE-2016-2821",
"url": "https://bugzilla.suse.com/983653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2821"
},
{
"cve": "CVE-2016-2822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2822"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2822",
"url": "https://www.suse.com/security/cve/CVE-2016-2822"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2822",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983652 for CVE-2016-2822",
"url": "https://bugzilla.suse.com/983652"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2822"
},
{
"cve": "CVE-2016-2824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2824"
}
],
"notes": [
{
"category": "general",
"text": "The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2824",
"url": "https://www.suse.com/security/cve/CVE-2016-2824"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2824",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983651 for CVE-2016-2824",
"url": "https://bugzilla.suse.com/983651"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2824"
},
{
"cve": "CVE-2016-2828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2828"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture\u0027s recycle pool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2828",
"url": "https://www.suse.com/security/cve/CVE-2016-2828"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2828",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983646 for CVE-2016-2828",
"url": "https://bugzilla.suse.com/983646"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2828"
},
{
"cve": "CVE-2016-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2830"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2830",
"url": "https://www.suse.com/security/cve/CVE-2016-2830"
},
{
"category": "external",
"summary": "SUSE Bug 983922 for CVE-2016-2830",
"url": "https://bugzilla.suse.com/983922"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2830",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2830"
},
{
"cve": "CVE-2016-2831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2831"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service (UI outage), or conduct clickjacking or spoofing attacks, via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2831",
"url": "https://www.suse.com/security/cve/CVE-2016-2831"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2831",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983632 for CVE-2016-2831",
"url": "https://bugzilla.suse.com/983632"
},
{
"category": "external",
"summary": "SUSE Bug 983643 for CVE-2016-2831",
"url": "https://bugzilla.suse.com/983643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2831"
},
{
"cve": "CVE-2016-2834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2834"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2834",
"url": "https://www.suse.com/security/cve/CVE-2016-2834"
},
{
"category": "external",
"summary": "SUSE Bug 983549 for CVE-2016-2834",
"url": "https://bugzilla.suse.com/983549"
},
{
"category": "external",
"summary": "SUSE Bug 983639 for CVE-2016-2834",
"url": "https://bugzilla.suse.com/983639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2834"
},
{
"cve": "CVE-2016-2835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2835"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2835",
"url": "https://www.suse.com/security/cve/CVE-2016-2835"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2835",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2835"
},
{
"cve": "CVE-2016-2836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2836"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2836",
"url": "https://www.suse.com/security/cve/CVE-2016-2836"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2836",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2836"
},
{
"cve": "CVE-2016-2837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2837"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2837",
"url": "https://www.suse.com/security/cve/CVE-2016-2837"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2837",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2837"
},
{
"cve": "CVE-2016-2838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2838"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2838",
"url": "https://www.suse.com/security/cve/CVE-2016-2838"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2838",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2838"
},
{
"cve": "CVE-2016-2839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2839"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2839",
"url": "https://www.suse.com/security/cve/CVE-2016-2839"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-2839",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-2839"
},
{
"cve": "CVE-2016-5252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5252"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5252",
"url": "https://www.suse.com/security/cve/CVE-2016-5252"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5252",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5252"
},
{
"cve": "CVE-2016-5254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5254"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5254",
"url": "https://www.suse.com/security/cve/CVE-2016-5254"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5254",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5254"
},
{
"cve": "CVE-2016-5258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5258"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5258",
"url": "https://www.suse.com/security/cve/CVE-2016-5258"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5258",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5258"
},
{
"cve": "CVE-2016-5259",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5259"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5259",
"url": "https://www.suse.com/security/cve/CVE-2016-5259"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5259",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5259"
},
{
"cve": "CVE-2016-5262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5262"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5262",
"url": "https://www.suse.com/security/cve/CVE-2016-5262"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5262",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5262"
},
{
"cve": "CVE-2016-5263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5263"
}
],
"notes": [
{
"category": "general",
"text": "The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5263",
"url": "https://www.suse.com/security/cve/CVE-2016-5263"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5263",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5263"
},
{
"cve": "CVE-2016-5264",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5264"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5264",
"url": "https://www.suse.com/security/cve/CVE-2016-5264"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5264",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5264"
},
{
"cve": "CVE-2016-5265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5265"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5265",
"url": "https://www.suse.com/security/cve/CVE-2016-5265"
},
{
"category": "external",
"summary": "SUSE Bug 991809 for CVE-2016-5265",
"url": "https://bugzilla.suse.com/991809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "moderate"
}
],
"title": "CVE-2016-5265"
},
{
"cve": "CVE-2016-6354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6354"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6354",
"url": "https://www.suse.com/security/cve/CVE-2016-6354"
},
{
"category": "external",
"summary": "SUSE Bug 1026047 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1026047"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/1035209"
},
{
"category": "external",
"summary": "SUSE Bug 990856 for CVE-2016-6354",
"url": "https://bugzilla.suse.com/990856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-branding-SLED-45.0-20.38.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-45.3.0esr-48.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:firefox-fontconfig-2.11.0-4.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-25.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.21.1-26.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.21.1-26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-08-12T16:10:10Z",
"details": "low"
}
],
"title": "CVE-2016-6354"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…