4633 moderate openSUSE 13.1 Update This update to Mozilla Firefox 46.0 fixes several security issues and bugs (boo#977333). The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977373) - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977375) - CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977376) - CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (boo#977386) - CVE-2016-2811: Use-after-free in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2812: Buffer overflow in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (boo#977381) - CVE-2016-2816: CSP not applied to pages sent with multipart/x-mixed-replace - MFSA 2016-45 (boo#977382) - CVE-2016-2817: Elevation of privilege with chrome.tabs.update API in web extensions - MFSA 2016-46 (boo#977384) - CVE-2016-2820: Firefox Health Reports could accept events from untrusted domains - MFSA 2016-48 (boo#977388) The following miscellaneous changes are included: - Improved security of the JavaScript Just In Time (JIT) Compiler - WebRTC fixes to improve performance and stability - Added support for document.elementsFromPoint - Added HKDF support for Web Crypto API The minimum requirements increased to NSPR 4.12 and NSS 3.22.3. Mozilla NSS was updated to 3.22.3 as a dependency for Mozilla Firefox 46.0, with the following changes: - Increase compatibility of TLS extended master secret, don't send an empty TLS extension last in the handshake (bmo#1243641) - RSA-PSS signatures are now supported - Pseudorandom functions based on hashes other than SHA-1 are now supported - Enforce an External Policy on NSS from a config file MozillaFirefox-46.0-113.2.i586.rpm MozillaFirefox-46.0-113.2.src.rpm MozillaFirefox-branding-upstream-46.0-113.2.i586.rpm MozillaFirefox-buildsymbols-46.0-113.2.i586.rpm MozillaFirefox-debuginfo-46.0-113.2.i586.rpm MozillaFirefox-debugsource-46.0-113.2.i586.rpm MozillaFirefox-devel-46.0-113.2.i586.rpm MozillaFirefox-translations-common-46.0-113.2.i586.rpm MozillaFirefox-translations-other-46.0-113.2.i586.rpm libfreebl3-3.22.3-77.1.i586.rpm libfreebl3-32bit-3.22.3-77.1.x86_64.rpm libfreebl3-debuginfo-3.22.3-77.1.i586.rpm libfreebl3-debuginfo-32bit-3.22.3-77.1.x86_64.rpm libsoftokn3-3.22.3-77.1.i586.rpm libsoftokn3-32bit-3.22.3-77.1.x86_64.rpm libsoftokn3-debuginfo-3.22.3-77.1.i586.rpm libsoftokn3-debuginfo-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-3.22.3-77.1.i586.rpm mozilla-nss-3.22.3-77.1.src.rpm mozilla-nss-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-certs-3.22.3-77.1.i586.rpm mozilla-nss-certs-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-certs-debuginfo-3.22.3-77.1.i586.rpm mozilla-nss-certs-debuginfo-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-debuginfo-3.22.3-77.1.i586.rpm mozilla-nss-debuginfo-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-debugsource-3.22.3-77.1.i586.rpm mozilla-nss-devel-3.22.3-77.1.i586.rpm mozilla-nss-sysinit-3.22.3-77.1.i586.rpm mozilla-nss-sysinit-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-sysinit-debuginfo-3.22.3-77.1.i586.rpm mozilla-nss-sysinit-debuginfo-32bit-3.22.3-77.1.x86_64.rpm mozilla-nss-tools-3.22.3-77.1.i586.rpm mozilla-nss-tools-debuginfo-3.22.3-77.1.i586.rpm MozillaFirefox-46.0-113.2.x86_64.rpm MozillaFirefox-branding-upstream-46.0-113.2.x86_64.rpm MozillaFirefox-buildsymbols-46.0-113.2.x86_64.rpm MozillaFirefox-debuginfo-46.0-113.2.x86_64.rpm MozillaFirefox-debugsource-46.0-113.2.x86_64.rpm MozillaFirefox-devel-46.0-113.2.x86_64.rpm MozillaFirefox-translations-common-46.0-113.2.x86_64.rpm MozillaFirefox-translations-other-46.0-113.2.x86_64.rpm libfreebl3-3.22.3-77.1.x86_64.rpm libfreebl3-debuginfo-3.22.3-77.1.x86_64.rpm libsoftokn3-3.22.3-77.1.x86_64.rpm libsoftokn3-debuginfo-3.22.3-77.1.x86_64.rpm mozilla-nss-3.22.3-77.1.x86_64.rpm mozilla-nss-certs-3.22.3-77.1.x86_64.rpm mozilla-nss-certs-debuginfo-3.22.3-77.1.x86_64.rpm mozilla-nss-debuginfo-3.22.3-77.1.x86_64.rpm mozilla-nss-debugsource-3.22.3-77.1.x86_64.rpm mozilla-nss-devel-3.22.3-77.1.x86_64.rpm mozilla-nss-sysinit-3.22.3-77.1.x86_64.rpm mozilla-nss-sysinit-debuginfo-3.22.3-77.1.x86_64.rpm mozilla-nss-tools-3.22.3-77.1.x86_64.rpm mozilla-nss-tools-debuginfo-3.22.3-77.1.x86_64.rpm