gpp_maybe Security update for mozillafirefox

SUSE-SLE-SAP-12-SP2-2019-2436

This update for MozillaFirefox to ESR 60.9 fixes the following issues: Security issues fixed: - CVE-2019-11742: Fixed a same-origin policy violation involving SVG filters and canvas to steal cross-origin images. (bsc#1149303) - CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297) - CVE-2019-11744: Fixed an XSS caused by breaking out of title and textarea elements using innerHTML. (bsc#1149304) - CVE-2019-11753: Fixed a privilege escalation with Mozilla Maintenance Service in custom Firefox installation location. (bsc#1149295) - CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296) - CVE-2019-11743: Fixed a timing side-channel attack on cross-origin information, utilizing unload event attributes. (bsc#1149298) - CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299)

• Release Date
  Sep 23 2019
• References
  Bugzilla: 1149324, 1149298, 1149303, 1149294, 1149296, 1149299, 1149297, 1149295, 1149304
  CVEs: CVE-2019-11743, CVE-2019-11752, CVE-2019-11753, CVE-2019-11744, CVE-2019-11740, CVE-2019-9812, CVE-2019-11742, CVE-2019-11746
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.9.0-109.86.1 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.9.0-109.86.1 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.9.0-109.86.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.9.0-109.86.1 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.9.0-109.86.1 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.9.0-109.86.1 lock rpm