SUSE-SU-2020:2747-1
SUSE-SU-2020:2747-1 · Security update for MozillaFirefox
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for MozillaFirefox fixes the following issues: -Firefox was updated to 78.3.0 ESR (bsc#1176756, MFSA 2020-43) - CVE-2020-15677: Download origin spoofing via redirect - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element - CVE-2020-15678: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario - CVE-2020-15673: Fixed memory safety bugs - Enhance fix for wayland-detection (bsc#1174420) - Attempt to fix langpack-parallelization by introducing separate obj-dirs for each lang (bsc#1173986, bsc#1167976)
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
- Plages de versions concernées
- ECOSYSTEM: < 78.3.0-3.108.1
Mettez à jour vers 78.3.0-3.108.1
Sources originales
- https://www.suse.com/support/update/announcement/2020/suse-su-20202747-1/
- https://bugzilla.suse.com/1167976
- https://bugzilla.suse.com/1173986
- https://bugzilla.suse.com/1174420
- https://bugzilla.suse.com/1176756
- https://www.suse.com/security/cve/CVE-2020-15673
- https://www.suse.com/security/cve/CVE-2020-15676
- https://www.suse.com/security/cve/CVE-2020-15677
- https://www.suse.com/security/cve/CVE-2020-15678
- https://osv.dev/vulnerability/SUSE-SU-2020:2747-1