Bugzilla – Bug 984117
VUL-0: CVE-2016-1951: mozilla-nspr: Memory allocation issue related to PR_*printf functions
Last modified: 2018-04-11 14:40:45 UTC
allocated by redhat rh#1311126 for a changelog entry: https://groups.google.com/forum/#!topic/mozilla.dev.tech.nspr/dV4MyMsg6jw The NSPR 4.12 release is now available. The hg tag is NSPR_4_12_RTM. The source tar file can be downloaded from https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.12/src/ NSPR 4.12 has the following bug fixes: * added a PR_GetEnvSecure function, which attempts to detect if the program is being executed with elevated privileges, and returns NULL if detected. It is recommended to use this function in general purpose library code. * fixed a memory allocation bug related to the PR_*printf functions * exported API PR_DuplicateEnvironment, which had already been added in NSPR 4.10.9 * added support for FreeBSD aarch64 * several minor correctness and compatibility fixes, for the full list see: https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&query_format=advanced&product=NSPR&target_milestone=4.12 Kai References: https://bugzilla.redhat.com/show_bug.cgi?id=1311126
https://bugzilla.mozilla.org/show_bug.cgi?id=1174015
bugbot adjusting priority
Released.