< back to search

gpp_maybe Security update for mozillafirefox
SUSE-SLE-SDK-12-SP4-2020-384

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.5.0 ESR * CVE-2020-6796 (bmo#1610426) Missing bounds check on shared memory read in the parent process * CVE-2020-6797 (bmo#1596668) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX * CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection * CVE-2020-6799 (bmo#1606596) Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543, bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785) Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 * Fixed: Fixed various issues opening files with spaces in their path (bmo#1601905, bmo#1602726)

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 aarch64
SUSE Linux Enterprise Software Development Kit 12.4 s390x
SUSE Linux Enterprise Software Development Kit 12.4 ppc64le
SUSE Linux Enterprise Software Development Kit 12.4 x86_64