p PatchFirst

SUSE-SU-2019:0273-1

SUSE-SU-2019:0273-1 · Security update for MozillaFirefox

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for MozillaFirefox, mozilla-nss fixes the following issues: Security issues fixed: - CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983). - CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983). - CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983). - CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069). Non-security issue fixed: - Update to MozillaFirefox ESR 60.5.0 - Update to mozilla-nss 3.41.1

Fix available

Published
Updated

Stack: system

Affected products and versions

  • mozilla-nss SUSE:Linux Enterprise Module for Basesystem 15

    Affected ranges
    • ECOSYSTEM: < 3.41.1-3.13.1

    Update to 3.41.1-3.13.1

  • mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15

    Affected ranges
    • ECOSYSTEM: < 60.5.0-3.24.2

    Update to 60.5.0-3.24.2

Original sources

Check your server →