Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0080-1

Опубликовано: 12 янв. 2021
Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.6.1 ESR
    • Fixed: Critical security issue MFSA 2021-01 (bsc#1180623)
    • CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk

Список пакетов

HPE Helion OpenStack 8
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.6.1-112.42.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.6.1-112.42.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
MozillaFirefox-78.6.1-112.42.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-78.6.1-112.42.1
SUSE Enterprise Storage 5
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP2-BCL
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP2-LTSS
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP3-BCL
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP3-LTSS
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP4-LTSS
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server 12 SP5
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE Linux Enterprise Software Development Kit 12 SP5
MozillaFirefox-devel-78.6.1-112.42.1
SUSE OpenStack Cloud 7
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE OpenStack Cloud 8
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE OpenStack Cloud 9
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE OpenStack Cloud Crowbar 8
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1
SUSE OpenStack Cloud Crowbar 9
MozillaFirefox-78.6.1-112.42.1
MozillaFirefox-devel-78.6.1-112.42.1
MozillaFirefox-translations-common-78.6.1-112.42.1

Описание

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.


Затронутые продукты
HPE Helion OpenStack 8:MozillaFirefox-78.6.1-112.42.1
HPE Helion OpenStack 8:MozillaFirefox-devel-78.6.1-112.42.1
HPE Helion OpenStack 8:MozillaFirefox-translations-common-78.6.1-112.42.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-78.6.1-112.42.1

Ссылки
Уязвимость SUSE-SU-2021:0080-1