shield Security update for mozillafirefox

SUSE-SLE-SAP-12-SP2-2020-2100

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR * Fixed: Various stability, functionality, and security fixes (bsc#1174538) * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker * CVE-2020-6514: WebRTC data channel leaks internal address to peer * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy * CVE-2020-15653: Bypassing iframe sandbox when allowing popups * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture * CVE-2020-15656: Type confusion for special arguments in IonMonkey * CVE-2020-15658: Overriding file type when saving to disk * CVE-2020-15657: DLL hijacking due to incorrect loading path * CVE-2020-15654: Custom cursor can overlay user interface * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

• Release Date
  Jul 31 2020
• References
  Bugzilla: 1174538, 1173948
  CVEs: CVE-2020-15657, CVE-2020-15658, CVE-2020-15656, CVE-2020-6514, CVE-2020-15653, CVE-2020-15659, CVE-2020-15654, CVE-2020-15652, CVE-2020-6463, CVE-2020-15655
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  78.1.0-112.8.1

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  78.1.0-112.8.1

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  78.1.0-112.8.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  78.1.0-112.8.1

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  78.1.0-112.8.1

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  78.1.0-112.8.1

  lock rpm