gpp_maybe Security update for mozillafirefox

SUSE-SLE-SERVER-12-2018-2648

This update for MozillaFirefox fixes the following issues: Security issues fixed: - Update to Mozilla Firefox 60.3.0esr: MFSA 2018-27 (bsc#1112852) - CVE-2018-12392: Crash with nested event loops. - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript. - CVE-2018-12395: WebExtension bypass of domain restrictions through header rewriting. - CVE-2018-12396: WebExtension content scripts can execute in disallowed contexts. - CVE-2018-12397: WebExtension local file access vulnerability. - CVE-2018-12389: Memory safety bugs fixed in Firefox ESR 60.3. - CVE-2018-12390: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3.

• Release Date
  Nov 13 2018
• References
  Bugzilla: 1112852
  CVEs: CVE-2018-12389, CVE-2018-12397, CVE-2018-12396, CVE-2018-12395, CVE-2018-12393, CVE-2018-12392, CVE-2018-12390
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.3.0-109.50.2 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.3.0-109.50.2 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.3.0-109.50.2 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.3.0-109.50.2 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.3.0-109.50.2 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.3.0-109.50.2 lock rpm