gpp_maybe Security update for mozillafirefox

SUSE-SLE-SERVER-12-2019-1684

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes could result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer.

• Release Date
  Jun 22 2019
• References
  Bugzilla: 1138872
  CVEs: CVE-2019-11708
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.7.2-109.80.1 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.7.2-109.80.1 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.7.2-109.80.1 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  60.7.2-109.80.1 lock rpm lock src

  MozillaFirefox-devel
  Devel package for Firefox

  60.7.2-109.80.1 lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  60.7.2-109.80.1 lock rpm