SUSE Linux: 2019:3337-1 Important: MozillaFirefox Security Fix
suse
December 18, 2019
An update that fixes 8 vulnerabilities is now available
Summary
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328) Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331) - CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments in WebRTC code (bmo#1580156) - CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a block cipher (bmo#1586176) - CVE-2019-17009: Fixed an issue where updater temporary files accessible to unprivileged processes (bmo#1510494) - CVE-2019-17010: Fixed a use-after-free when performing device orientation checks (bmo#1581084) - CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170) - CVE-2019-17011: Fixed a use-after-free when retrieving a document in
Topics Covered
References
#1157652 #1158328
Cross- CVE-2019-11745 CVE-2019-13722 CVE-2019-17005
CVE-2019-17008 CVE-2019-17009 CVE-2019-17010
CVE-2019-17011 CVE-2019-17012
Affected Products:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Desktop Applications 15-SP1
SUSE Linux Enterprise Module for Desktop Applications 15
https://www.suse.com/security/cve/CVE-2019-11745.html
https://www.suse.com/security/cve/CVE-2019-13722.html
https://www.suse.com/security/cve/CVE-2019-17005.html
https://www.suse.com/security/cve/CVE-2019-17008.html
https://www.suse.com/security/cve/CVE-2019-17009.html
https://www.suse.com/security/cve/CVE-2019-17010.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2019:3337-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!