Upstream information

CVE-2017-5426 at MITRE

Description

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

SUSE information

CVSS v2 Scores
  SUSE
Base Score 5.10
Vector AV:N/AC:H/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entries: 1028391 [NEW], 1028393 [RESOLVED / DUPLICATE]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE Leap 42.1
  • MozillaFirefox >= 52.0-55.2
  • MozillaFirefox-branding-upstream >= 52.0-55.2
  • MozillaFirefox-buildsymbols >= 52.0-55.2
  • MozillaFirefox-debuginfo >= 52.0-55.2
  • MozillaFirefox-debugsource >= 52.0-55.2
  • MozillaFirefox-devel >= 52.0-55.2
  • MozillaFirefox-translations-common >= 52.0-55.2
  • MozillaFirefox-translations-other >= 52.0-55.2
  • MozillaThunderbird >= 52.1.0-42.1
  • MozillaThunderbird-buildsymbols >= 52.1.0-42.1
  • MozillaThunderbird-debuginfo >= 52.1.0-42.1
  • MozillaThunderbird-debugsource >= 52.1.0-42.1
  • MozillaThunderbird-devel >= 52.1.0-42.1
  • MozillaThunderbird-translations-common >= 52.1.0-42.1
  • MozillaThunderbird-translations-other >= 52.1.0-42.1
  • java-1_8_0-openjdk >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-accessibility >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-debuginfo >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-debugsource >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-demo >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-demo-debuginfo >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-devel >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-devel-debuginfo >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-headless >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-headless-debuginfo >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-javadoc >= 1.8.0.121-23.1
  • java-1_8_0-openjdk-src >= 1.8.0.121-23.1
  • libfreebl3 >= 3.28.3-38.1
  • libfreebl3-32bit >= 3.28.3-38.1
  • libfreebl3-debuginfo >= 3.28.3-38.1
  • libfreebl3-debuginfo-32bit >= 3.28.3-38.1
  • libsoftokn3 >= 3.28.3-38.1
  • libsoftokn3-32bit >= 3.28.3-38.1
  • libsoftokn3-debuginfo >= 3.28.3-38.1
  • libsoftokn3-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss >= 3.28.3-38.1
  • mozilla-nss-32bit >= 3.28.3-38.1
  • mozilla-nss-certs >= 3.28.3-38.1
  • mozilla-nss-certs-32bit >= 3.28.3-38.1
  • mozilla-nss-certs-debuginfo >= 3.28.3-38.1
  • mozilla-nss-certs-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-debuginfo >= 3.28.3-38.1
  • mozilla-nss-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-debugsource >= 3.28.3-38.1
  • mozilla-nss-devel >= 3.28.3-38.1
  • mozilla-nss-sysinit >= 3.28.3-38.1
  • mozilla-nss-sysinit-32bit >= 3.28.3-38.1
  • mozilla-nss-sysinit-debuginfo >= 3.28.3-38.1
  • mozilla-nss-sysinit-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-tools >= 3.28.3-38.1
  • mozilla-nss-tools-debuginfo >= 3.28.3-38.1
Patchnames:
openSUSE-2017-344
openSUSE-2017-545
openSUSE Leap 42.2
  • MozillaFirefox >= 52.0-55.2
  • MozillaFirefox-branding-upstream >= 52.0-55.2
  • MozillaFirefox-buildsymbols >= 52.0-55.2
  • MozillaFirefox-debuginfo >= 52.0-55.2
  • MozillaFirefox-debugsource >= 52.0-55.2
  • MozillaFirefox-devel >= 52.0-55.2
  • MozillaFirefox-translations-common >= 52.0-55.2
  • MozillaFirefox-translations-other >= 52.0-55.2
  • MozillaThunderbird >= 52.1.0-41.3.1
  • MozillaThunderbird-buildsymbols >= 52.1.0-41.3.1
  • MozillaThunderbird-debuginfo >= 52.1.0-41.3.1
  • MozillaThunderbird-debugsource >= 52.1.0-41.3.1
  • MozillaThunderbird-devel >= 52.1.0-41.3.1
  • MozillaThunderbird-translations-common >= 52.1.0-41.3.1
  • MozillaThunderbird-translations-other >= 52.1.0-41.3.1
  • java-1_8_0-openjdk >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-accessibility >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-debuginfo >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-debugsource >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-demo >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-demo-debuginfo >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-devel >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-devel-debuginfo >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-headless >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-headless-debuginfo >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-javadoc >= 1.8.0.121-8.1
  • java-1_8_0-openjdk-src >= 1.8.0.121-8.1
  • libfreebl3 >= 3.28.3-38.1
  • libfreebl3-32bit >= 3.28.3-38.1
  • libfreebl3-debuginfo >= 3.28.3-38.1
  • libfreebl3-debuginfo-32bit >= 3.28.3-38.1
  • libsoftokn3 >= 3.28.3-38.1
  • libsoftokn3-32bit >= 3.28.3-38.1
  • libsoftokn3-debuginfo >= 3.28.3-38.1
  • libsoftokn3-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss >= 3.28.3-38.1
  • mozilla-nss-32bit >= 3.28.3-38.1
  • mozilla-nss-certs >= 3.28.3-38.1
  • mozilla-nss-certs-32bit >= 3.28.3-38.1
  • mozilla-nss-certs-debuginfo >= 3.28.3-38.1
  • mozilla-nss-certs-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-debuginfo >= 3.28.3-38.1
  • mozilla-nss-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-debugsource >= 3.28.3-38.1
  • mozilla-nss-devel >= 3.28.3-38.1
  • mozilla-nss-sysinit >= 3.28.3-38.1
  • mozilla-nss-sysinit-32bit >= 3.28.3-38.1
  • mozilla-nss-sysinit-debuginfo >= 3.28.3-38.1
  • mozilla-nss-sysinit-debuginfo-32bit >= 3.28.3-38.1
  • mozilla-nss-tools >= 3.28.3-38.1
  • mozilla-nss-tools-debuginfo >= 3.28.3-38.1
Patchnames:
openSUSE-2017-344
openSUSE-2017-545


List of planned updates

The following information is the current evaluation information for this security issue. It might neither be accurate nor complete, Use at own risk.
Product(s) Source package
  • SUSE Linux Enterprise Server for SAP 11 SP3
MozillaFirefox