Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3312-1

Опубликовано: 12 нояб. 2020
Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.4.1 ESR
    • Fixed: Security fix MFSA 2020-49 (bsc#1178588)
    • CVE-2020-26950 (bmo#1675905) Write side effects in MCallGetProperty opcode not accounted for

Список пакетов

Container suse/kiosk/firefox-esr:esr
MozillaFirefox-78.4.1-8.14.1
Container suse/kiosk/firefox-esr:latest
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.4.1-8.14.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
MozillaFirefox-78.4.1-8.14.1
MozillaFirefox-devel-78.4.1-8.14.1
MozillaFirefox-translations-common-78.4.1-8.14.1
MozillaFirefox-translations-other-78.4.1-8.14.1

Ссылки

Описание

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.

Затронутые продукты
Container suse/kiosk/firefox-esr:esr:MozillaFirefox-78.4.1-8.14.1
Container suse/kiosk/firefox-esr:latest:MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-78.4.1-8.14.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-78.4.1-8.14.1
Ссылки
Уязвимость SUSE-SU-2020:3312-1