SUSE-SU-2020:0978-1

Details

Description of the patch:

This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:

CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).
CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).
CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).
CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).
CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).

Affected Packages

MozillaFirefox

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

68.7.0-109.116.1

MozillaFirefox-translations-common

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

68.7.0-109.116.1

MozillaFirefox-devel

SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

68.7.0-109.116.1

References

ADVISORY

https://bugzilla.suse.com/1168874

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-6821/

ADVISORY

https://www.suse.com/security/cve/CVE-2020-6822/

ADVISORY