gpp_maybe Security update for mozillafirefox

SUSE-SLE-SDK-12-SP4-2020-978

This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues: - CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874). - CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874). - CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874). - CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874). - CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).

• Release Date
  Apr 9 2020
• References
  Bugzilla: 1168874
  CVEs: CVE-2020-6828, CVE-2020-6827, CVE-2020-6821, CVE-2020-6825, CVE-2020-6822
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.7.0-109.116.1

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.7.0-109.116.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.7.0-109.116.1

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.7.0-109.116.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.7.0-109.116.1

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.7.0-109.116.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  68.7.0-109.116.1

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  68.7.0-109.116.1

  lock rpm