openSUSE Security Update : seamonkey (openSUSE-2017-189)

High Nessus Plugin ID 96942

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 5.9

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for SeaMonkey to version 2.46 fixes security issues and bugs.

The following vulnerabilities were fixed :

- Fix all Gecko related security issues between 43.0.1 and 49.0.2

- CVE-2016-6354: buffer overrun in flex (boo#990856)

The following non-security changes are included :

- improve recognition of LANGUAGE env variable (boo#1017174)

- improve TLS compatibility with certain websites (boo#1021636)

- SeaMonkey now requires NSPR 4.12 and NSS 3.25

- based on Gecko 49.0.2

- Chatzilla and DOM Inspector were disabled

Solution

Update the affected seamonkey packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1017174

https://bugzilla.opensuse.org/show_bug.cgi?id=1021636

https://bugzilla.opensuse.org/show_bug.cgi?id=984637

https://bugzilla.opensuse.org/show_bug.cgi?id=990856

Plugin Details

Severity: High

ID: 96942

File Name: openSUSE-2017-189.nasl

Version: 3.3

Type: local

Agent: unix

Published: 2017/02/02

Updated: 2021/01/19

Dependencies: 12634

Risk Information

Risk Factor: High

VPR Score: 5.9

CVSS v2.0

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3.0

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:seamonkey, p-cpe:/a:novell:opensuse:seamonkey-debuginfo, p-cpe:/a:novell:opensuse:seamonkey-debugsource, p-cpe:/a:novell:opensuse:seamonkey-translations-common, p-cpe:/a:novell:opensuse:seamonkey-translations-other, cpe:/o:novell:opensuse:42.1, cpe:/o:novell:opensuse:42.2

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2017/02/01

Reference Information

CVE: CVE-2016-6354