gpp_maybe Security update for mozillafirefox

SUSE-SLE-SERVER-12-2018-1560

This update for MozillaFirefox to version ESR 52.9 fixes the following issues: - CVE-2018-5188: Various memory safety bugs (bsc#1098998) - CVE-2018-12368: No warning when opening executable SettingContent-ms files - CVE-2018-12366: Invalid data handling during QCMS transformations - CVE-2018-12365: Compromised IPC child process can list local filenames - CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins - CVE-2018-12363: Use-after-free when appending DOM nodes - CVE-2018-12362: Integer overflow in SSSE3 scaler - CVE-2018-12360: Use-after-free when using focus() - CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture - CVE-2018-12359: Buffer overflow using computed size of canvas element

• Release Date
  Aug 14 2018
• References
  Bugzilla: 1098998
  CVEs: CVE-2018-12362, CVE-2018-12363, CVE-2018-12360, CVE-2018-12366, CVE-2018-12364, CVE-2018-12365, CVE-2018-12368, CVE-2018-12359, CVE-2018-5188, CVE-2018-5156
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  52.9.0esr-109.38.2 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  52.9.0esr-109.38.2 lock rpm

  MozillaFirefox-translations
  Translations for Firefox

  52.9.0esr-109.38.2 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  52.9.0esr-109.38.2 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  52.9.0esr-109.38.2 lock rpm

  MozillaFirefox-translations
  Translations for Firefox

  52.9.0esr-109.38.2 lock rpm