gpp_maybe
Security update for mozillafirefox
SUSE-SLE-SDK-12-SP5-2024-2012
This update for MozillaFirefox fixes the following issues: - Update to version 115.12.0 ESR (bsc#1226027) - CVE-2024-5702: Use-after-free in networking - CVE-2024-5688: Use-after-free in JavaScript object transplant - CVE-2024-5690: External protocol handlers leaked by timing attack - CVE-2024-5691: Sandboxed iframes were able to bypass sandbox restrictions to open a new window - CVE-2024-5692: Bypass of file name restrictions during saving - CVE-2024-5693: Cross-Origin Image leak via Offscreen Canvas - CVE-2024-5696: Memory Corruption in Text Fragments - CVE-2024-5700: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12
-
Release DateJun 12 2024
-
ReferencesBugzilla: 1226027
CVEs: CVE-2024-5702, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5692, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12.5 aarch64
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel115.12.0-112.215.1 lock src
Devel package for Firefox115.12.0-112.215.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.5 ppc64le
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel115.12.0-112.215.1 lock src
Devel package for Firefox115.12.0-112.215.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.5 s390x
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel115.12.0-112.215.1 lock src
Devel package for Firefox115.12.0-112.215.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.5 x86_64
-
PackagesMozillaFirefox
Mozilla Firefox Web BrowserMozillaFirefox-devel115.12.0-112.215.1 lock src
Devel package for Firefox115.12.0-112.215.1 lock rpm