SUSE-SU-2020:0928-1

UNKNOWN

Security update for MozillaFirefox

Published Apr 6, 2020

Modified 5 years ago

Fix available

Details

This update for MozillaFirefox fixes the following issues:

Mozilla Firefox 68.6.1esr MFSA 2020-11 (bsc#1168630)
- CVE-2020-6819 (bmo#1620818) Use-after-free while running the nsDocShell destructor
- CVE-2020-6820 (bmo#1626728) Use-after-free when handling a ReadableStream

Affected Packages

MozillaFirefox

SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

68.6.1-109.113.1

MozillaFirefox-translations-common

SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

68.6.1-109.113.1

MozillaFirefox-devel

SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

68.6.1-109.113.1

References

REPORT

https://bugzilla.suse.com/1168630

WEB

https://www.suse.com/security/cve/CVE-2020-6819

WEB

https://www.suse.com/security/cve/CVE-2020-6820

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20200928-1/

Upstream

CVE-2020-6819 CVE-2020-6820

Ecosystems(19)

SUSE Enterprise Storage 5 SUSE HPE Helion OpenStack 8 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS

Timeline

PublishedApr 6, 2020

ModifiedApr 6, 2020

SUSE-SU-2020:0928-1 | Mondoo Vulnerability Intelligence