SUSE-SU-2020:0971-1
SUSE-SU-2020:0971-1 · Security update for MozillaFirefox
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues: - CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874). - CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874). - CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874). - CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874). - CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
- Intervalos de versiones afectados
- ECOSYSTEM: < 68.7.0-3.84.2
Actualiza a 68.7.0-3.84.2
Fuentes originales
- https://www.suse.com/support/update/announcement/2020/suse-su-20200971-1/
- https://bugzilla.suse.com/1168874
- https://www.suse.com/security/cve/CVE-2020-6821
- https://www.suse.com/security/cve/CVE-2020-6822
- https://www.suse.com/security/cve/CVE-2020-6825
- https://www.suse.com/security/cve/CVE-2020-6827
- https://www.suse.com/security/cve/CVE-2020-6828
- https://osv.dev/vulnerability/SUSE-SU-2020:0971-1