SUSE-SU-2020:2747-1
SUSE-SU-2020:2747-1 · Security update for MozillaFirefox
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaFirefox fixes the following issues: -Firefox was updated to 78.3.0 ESR (bsc#1176756, MFSA 2020-43) - CVE-2020-15677: Download origin spoofing via redirect - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element - CVE-2020-15678: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario - CVE-2020-15673: Fixed memory safety bugs - Enhance fix for wayland-detection (bsc#1174420) - Attempt to fix langpack-parallelization by introducing separate obj-dirs for each lang (bsc#1173986, bsc#1167976)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 78.3.0-3.108.1
Update to 78.3.0-3.108.1
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20202747-1/
- https://bugzilla.suse.com/1167976
- https://bugzilla.suse.com/1173986
- https://bugzilla.suse.com/1174420
- https://bugzilla.suse.com/1176756
- https://www.suse.com/security/cve/CVE-2020-15673
- https://www.suse.com/security/cve/CVE-2020-15676
- https://www.suse.com/security/cve/CVE-2020-15677
- https://www.suse.com/security/cve/CVE-2020-15678
- https://osv.dev/vulnerability/SUSE-SU-2020:2747-1