Bug 984117 (CVE-2016-1951) - VUL-0: CVE-2016-1951: mozilla-nspr: Memory allocation issue related to PR_*printf functions
Summary: VUL-0: CVE-2016-1951: mozilla-nspr: Memory allocation issue related to PR_*pr...
Status: RESOLVED FIXED
Alias: CVE-2016-1951
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Petr Cerny
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/169959/
Whiteboard: CVSSv2:SUSE:CVE-2016-1951:5.8:(AV:N/A...
Keywords:
Depends on:
Blocks:
 
Reported: 2016-06-10 09:11 UTC by Marcus Meissner
Modified: 2018-04-11 14:40 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2016-06-10 09:11:24 UTC
allocated by redhat rh#1311126 for a changelog entry:

https://groups.google.com/forum/#!topic/mozilla.dev.tech.nspr/dV4MyMsg6jw
The NSPR 4.12 release is now available.  The hg tag is
NSPR_4_12_RTM.  The source tar file can be downloaded from
https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.12/src/

NSPR 4.12 has the following bug fixes:

* added a PR_GetEnvSecure function, which attempts to detect if the program
  is being executed with elevated privileges, and returns NULL if detected.
  It is recommended to use this function in general purpose library code.

* fixed a memory allocation bug related to the PR_*printf functions

* exported API PR_DuplicateEnvironment, which had already been added in
  NSPR 4.10.9

* added support for FreeBSD aarch64

* several minor correctness and compatibility fixes, for the full list see:
  https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&query_format=advanced&product=NSPR&target_milestone=4.12

Kai 

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1311126
Comment 1 Marcus Meissner 2016-06-10 09:18:13 UTC
https://bugzilla.mozilla.org/show_bug.cgi?id=1174015
Comment 2 Swamp Workflow Management 2016-06-10 22:00:14 UTC
bugbot adjusting priority
Comment 3 Petr Cerny 2017-08-10 14:56:18 UTC
Released.