gpp_maybe Security update for mozillafirefox

SUSE-SLE-SAP-12-SP4-2021-1325

This update for MozillaFirefox fixes the following issues: - Firefox was updated to 78.10.0 ESR (bsc#1184960) * CVE-2021-23994: Out of bound write due to lazy initialization * CVE-2021-23995: Use-after-free in Responsive Design Mode * CVE-2021-23998: Secure Lock icon could have been spoofed * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage * CVE-2021-23999: Blob URLs may have been granted additional privileges * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads * CVE-2021-29946: Port blocking could be bypassed

• Release Date
  Apr 27 2021
• References
  Bugzilla: 1184960
  CVEs: CVE-2021-29946, CVE-2021-24002, CVE-2021-23961, CVE-2021-23995, CVE-2021-23998, CVE-2021-23999, CVE-2021-23994, CVE-2021-29945
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  78.10.0-112.57.2

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  78.10.0-112.57.2

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  78.10.0-112.57.2

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  78.10.0-112.57.2

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  78.10.0-112.57.2

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  78.10.0-112.57.2

  lock rpm