| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for MozillaFirefox (Important) |
| Description: |
This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues:
Security issues fixed:
- CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing (bsc#1173576). - CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster (bsc#1173576). - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576). - CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576). - CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576). - CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576). - CVE-2020-12402: RSA Key Generation vulnerable to side-channel attack (bsc#1173576). - CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576). - CVE-2020-12422: Integer overflow in nsJPEGEncoder::emptyOutputBuffer (bsc#1173576). - CVE-2020-12423: DLL Hijacking due to searching %PATH% for a library (bsc#1173576). - CVE-2020-12424: WebRTC permission prompt could have been bypassed by a compromised content process (bsc#1173576). - CVE-2020-12425: Out of bound read in Date.parse() (bsc#1173576). - CVE-2020-12426: Memory safety bugs fixed in Firefox 78 (bsc#1173576). - FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled (bsc#1167231).
Non-security issues fixed:
- Fixed interaction with freetype6 (bsc#1173613).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1013712
1027519
1138425
1148728
1167231
1170446
1172177
1172205
1173274
1173376
1173377
1173378
1173380
1173576
1173592
1173594
1173613
1174120
1174316
1174415
1176579
1178971
CVE-2016-9798
CVE-2019-15757
CVE-2020-0543
CVE-2020-12402
CVE-2020-12415
CVE-2020-12416
CVE-2020-12417
CVE-2020-12418
CVE-2020-12419
CVE-2020-12420
CVE-2020-12421
CVE-2020-12422
CVE-2020-12423
CVE-2020-12424
CVE-2020-12425
CVE-2020-12426
CVE-2020-14422
CVE-2020-1472
CVE-2020-15563
CVE-2020-15565
CVE-2020-15566
CVE-2020-15567
CVE-2020-15900
CVE-2020-8164
CVE-2020-8695
CVE-2020-8696
CVE-2020-8698
openSUSE-SU-2019:1619-1
openSUSE-SU-2019:2096-1
openSUSE-SU-2019:2588-1
openSUSE-SU-2020:0931-1
openSUSE-SU-2020:0985-1
openSUSE-SU-2020:1533-1
SUSE-SU-2020:2097-1
SUSE-SU-2020:3514-1
|
| Platform(s): | openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE Linux Enterprise Server 12 SP4-LTSS
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.1 is installed AND Package Information
GraphicsMagick-1.3.29-lp151.4.6 is installed
OR GraphicsMagick-devel-1.3.29-lp151.4.6 is installed
OR libGraphicsMagick++-Q16-12-1.3.29-lp151.4.6 is installed
OR libGraphicsMagick++-devel-1.3.29-lp151.4.6 is installed
OR libGraphicsMagick-Q16-3-1.3.29-lp151.4.6 is installed
OR libGraphicsMagick3-config-1.3.29-lp151.4.6 is installed
OR libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.6 is installed
OR perl-GraphicsMagick-1.3.29-lp151.4.6 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.2 is installed
AND Package Information
xen-4.13.1_04-lp152.2.3 is installed
OR xen-devel-4.13.1_04-lp152.2.3 is installed
OR xen-doc-html-4.13.1_04-lp152.2.3 is installed
OR xen-libs-4.13.1_04-lp152.2.3 is installed
OR xen-libs-32bit-4.13.1_04-lp152.2.3 is installed
OR xen-tools-4.13.1_04-lp152.2.3 is installed
OR xen-tools-domU-4.13.1_04-lp152.2.3 is installed
OR xen-tools-xendomains-wait-disk-4.13.1_04-lp152.2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
AND Package Information
MozillaFirefox-78.0.1-112.3 is installed
OR MozillaFirefox-branding-SLE-78-35.3 is installed
OR MozillaFirefox-devel-78.0.1-112.3 is installed
OR MozillaFirefox-translations-common-78.0.1-112.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4-LTSS is installed
AND Package Information
ghostscript-9.52-23.39 is installed
OR ghostscript-x11-9.52-23.39 is installed
|