FlawAtlas
Search the atlas
SUSE-SU-2017:2688-1 Not scored

Security update for MozillaFirefox, mozilla-nss

This update for MozillaFirefox to ESR 52.4, mozilla-nss fixes the following issues: This security issue was fixed for mozilla-nss: - CVE-2017-7805: Prevent use-after-free in TLS 1.2 when generating handshake hashes (bsc#1061005) These security issues were fixed for Firefox - CVE-2017-7825: Fixed some Tibetan and Arabic unicode characters rendering (bsc#1060445). - CVE-2017-7805: Prevent Use-after-free in TLS 1.2 generating handshake hashes (bsc#1060445). - CVE-2017-7819: Prevent Use-after-free while resizing images in design mode (bsc#1060445). - CVE-2017-7818: Prevent Use-after-free during ARIA array manipulation (bsc#1060445). - CVE-2017-7793: Prevent Use-after-free with Fetch API (bsc#1060445). - CVE-2017-7824: Prevent Buffer overflow when drawing and validating elements with ANGLE (bsc#1060445). - CVE-2017-7810: Fixed several memory safety bugs (bsc#1060445). - CVE-2017-7823: CSP sandbox directive did not create a unique origin (bsc#1060445). - CVE-2017-7814: Blob and data URLs bypassed phishing and malware protection warnings (bsc#1060445).

Exploit probability Not scored
Published October 10, 2017
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP2 mozilla-nss
SUSE:Linux Enterprise Desktop 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3 mozilla-nss
SUSE:Linux Enterprise Server 12 SP1-LTSS MozillaFirefox
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS mozilla-nss
SUSE:Linux Enterprise Server 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2 mozilla-nss
SUSE:Linux Enterprise Server 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3 mozilla-nss
SUSE:Linux Enterprise Server 12-LTSS MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12 SP2 mozilla-nss
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3 mozilla-nss
SUSE:OpenStack Cloud 6 MozillaFirefox
SUSE:OpenStack Cloud 6 mozilla-nss

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2017:2688-1

This update for MozillaFirefox to ESR 52.4, mozilla-nss fixes the following issues: This security issue was fixed for mozilla-nss: - CVE-2017-7805: Prevent use-after-free in TLS 1.2 when generating handshake hashes (bsc#1061005) These security issues were fixed for Firefox - CVE-2017-7825: Fixed some Tibetan and Arabic unicode characters rendering (bsc#1060445). - CVE-2017-7805: Prevent Use-after-free in TLS 1.2 generating handshake hashes (bsc#1060445). - CVE-2017-7819: Prevent Use-after-free while resizing images in design mode (bsc#1060445). - CVE-2017-7818: Prevent Use-after-free during ARIA array manipulation (bsc#1060445). - CVE-2017-7793: Prevent Use-after-free with Fetch API (bsc#1060445). - CVE-2017-7824: Prevent Buffer overflow when drawing and validating elements with ANGLE (bsc#1060445). - CVE-2017-7810: Fixed several memory safety bugs (bsc#1060445). - CVE-2017-7823: CSP sandbox directive did not create a unique origin (bsc#1060445). - CVE-2017-7814: Blob and data URLs bypassed phishing and malware protection warnings (bsc#1060445).

View original source

05 / REFERENCES

Further evidence