gpp_maybe Security update for mozillafirefox

SUSE-SLE-SAP-12-SP2-2020-1218

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR (bsc#1171186): - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process types - CVE-2020-6831: Buffer overflow in SCTP chunk input validation - CVE-2020-12392: Arbitrary local file access with 'Copy as cURL' - CVE-2020-12393: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection - CVE-2020-12395: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8

• Release Date
  May 7 2020
• References
  Bugzilla: 1171186
  CVEs: CVE-2020-12387, CVE-2020-12392, CVE-2020-12389, CVE-2020-6831, CVE-2020-12395, CVE-2020-12393, CVE-2020-12388
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.8.0-109.119.1

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.8.0-109.119.1

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  68.8.0-109.119.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.8.0-109.119.1

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.8.0-109.119.1

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  68.8.0-109.119.1

  lock rpm